Closed
Description
What would you like to be added?
Golang 1.24.4 and 1.23.10 were released today. According to our Dependency management documentation, we want to stay on the latest patch version. This means updating the release-3.4, release-3.5, and release-3.6 branches to 1.23.10 and main to 1.24.4.
This patch includes the security fixes for CVE-2025-4673, CVE-2025-0913, and CVE-2025-22874.
Progress track:
- etcd
-
main: go v1.24.4 - [main] Bump Go to 1.24.4 #20163 -
release-3.6: go v1.23.10 - [release-3.6] Bump Go to 1.23.10 #20128 -
release-3.5: go v1.23.10 - [release-3.5] Bump Go to 1.23.10 #20164 -
release-3.4: go v1.23.10 - [release-3.4] Bump Go to 1.23.10 #20166 -
CHANGELOG
-
- bbolt
-
main: go v1.24.4 - Bump Go to 1.24.4 bbolt#983 -
release-1.3: v1.23.10 - [release-1.3] Bump Go to 1.23.10 bbolt#984 -
release-1.4: v1.23.10 - [release-1.4] Bump Go to 1.23.10 bbolt#985
-
- raft
-
main: go v1.24.4 - Bump Go to 1.24.4 raft#304 -
release-3.6: go v1.23.10 - [release-3.6] Bump Go to 1.23.10 raft#305
-
-
etcd-io/gofailmain: go v1.23.10 - Bump Go to 1.23.10 gofail#116 -
etcd-io/augermain: go v1.24.4 - Bump Go to 1.24.4 auger#307 -
etcd-io/etcd-operator: go v1.24.4 - Bump Go to 1.24.4 etcd-operator#164 -
etcd-io/protodoc: go v1.23.10 - Bump Go to 1.23.10 protodoc#20
Please review the previous issues and their corresponding pull requests, such as #19866 and #19713.
Why is this needed?
To keep the project up to date with the latest Go versions. And to address CVE-2025-4673, CVE-2025-0913, and CVE-2025-22874.