Browse Source

Backport of [NET-5574] Update Go version to 1.20.8 into release/1.14.x (#18761)

backport of commit d2a0fe8

Co-authored-by: Michael Zalimeni <michael.zalimeni@hashicorp.com>
pull/18731/head^2
hc-github-team-consul-core 1 year ago committed by GitHub
parent
commit
4de1d6b672
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 8
      .changelog/18742.txt
  2. 20
      .github/workflows/build.yml
  3. 2
      build-support/docker/Build-Go.dockerfile

8
.changelog/18742.txt

@ -0,0 +1,8 @@
```release-note:security
Upgrade to use Go 1.20.8. This resolves CVEs
[CVE-2023-39320](https://github.com/advisories/GHSA-rxv8-v965-v333) (`cmd/go`),
[CVE-2023-39318](https://github.com/advisories/GHSA-vq7j-gx56-rxjh) (`html/template`),
[CVE-2023-39319](https://github.com/advisories/GHSA-vv9m-32rr-3g55) (`html/template`),
[CVE-2023-39321](https://github.com/advisories/GHSA-9v7r-x7cv-v437) (`crypto/tls`), and
[CVE-2023-39322](https://github.com/advisories/GHSA-892h-r6cr-53g4) (`crypto/tls`)
```

20
.github/workflows/build.yml

@ -81,15 +81,15 @@ jobs:
strategy:
matrix:
include:
- {go: "1.20.7", goos: "linux", goarch: "386"}
- {go: "1.20.7", goos: "linux", goarch: "amd64"}
- {go: "1.20.7", goos: "linux", goarch: "arm"}
- {go: "1.20.7", goos: "linux", goarch: "arm64"}
- {go: "1.20.7", goos: "freebsd", goarch: "386"}
- {go: "1.20.7", goos: "freebsd", goarch: "amd64"}
- {go: "1.20.7", goos: "windows", goarch: "386"}
- {go: "1.20.7", goos: "windows", goarch: "amd64"}
- {go: "1.20.7", goos: "solaris", goarch: "amd64"}
- {go: "1.20.8", goos: "linux", goarch: "386"}
- {go: "1.20.8", goos: "linux", goarch: "amd64"}
- {go: "1.20.8", goos: "linux", goarch: "arm"}
- {go: "1.20.8", goos: "linux", goarch: "arm64"}
- {go: "1.20.8", goos: "freebsd", goarch: "386"}
- {go: "1.20.8", goos: "freebsd", goarch: "amd64"}
- {go: "1.20.8", goos: "windows", goarch: "386"}
- {go: "1.20.8", goos: "windows", goarch: "amd64"}
- {go: "1.20.8", goos: "solaris", goarch: "amd64"}
fail-fast: true
name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build
@ -178,7 +178,7 @@ jobs:
matrix:
goos: [ darwin ]
goarch: [ "amd64", "arm64" ]
go: [ "1.20.7" ]
go: [ "1.20.8" ]
fail-fast: true
name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build

2
build-support/docker/Build-Go.dockerfile

@ -1,7 +1,7 @@
# Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: MPL-2.0
ARG GOLANG_VERSION=1.20.7
ARG GOLANG_VERSION=1.20.8
FROM golang:${GOLANG_VERSION}
WORKDIR /consul

Loading…
Cancel
Save