Browse Source

[NET-5574] Update Go version to 1.20.8 (#18742)

Update Go version to 1.20.8

This resolves several CVEs (see changelog entry).
pull/18766/head
Michael Zalimeni 1 year ago committed by GitHub
parent
commit
5e7afdf9a1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
  1. 8
      .changelog/18742.txt
  2. 22
      .github/workflows/build.yml
  3. 2
      build-support/docker/Build-Go.dockerfile

8
.changelog/18742.txt

@ -0,0 +1,8 @@
```release-note:security
Upgrade to use Go 1.20.8. This resolves CVEs
[CVE-2023-39320](https://github.com/advisories/GHSA-rxv8-v965-v333) (`cmd/go`),
[CVE-2023-39318](https://github.com/advisories/GHSA-vq7j-gx56-rxjh) (`html/template`),
[CVE-2023-39319](https://github.com/advisories/GHSA-vv9m-32rr-3g55) (`html/template`),
[CVE-2023-39321](https://github.com/advisories/GHSA-9v7r-x7cv-v437) (`crypto/tls`), and
[CVE-2023-39322](https://github.com/advisories/GHSA-892h-r6cr-53g4) (`crypto/tls`)
```

22
.github/workflows/build.yml

@ -85,15 +85,15 @@ jobs:
strategy: strategy:
matrix: matrix:
include: include:
- {go: "1.20.7", goos: "linux", goarch: "386"} - {go: "1.20.8", goos: "linux", goarch: "386"}
- {go: "1.20.7", goos: "linux", goarch: "amd64"} - {go: "1.20.8", goos: "linux", goarch: "amd64"}
- {go: "1.20.7", goos: "linux", goarch: "arm"} - {go: "1.20.8", goos: "linux", goarch: "arm"}
- {go: "1.20.7", goos: "linux", goarch: "arm64"} - {go: "1.20.8", goos: "linux", goarch: "arm64"}
- {go: "1.20.7", goos: "freebsd", goarch: "386"} - {go: "1.20.8", goos: "freebsd", goarch: "386"}
- {go: "1.20.7", goos: "freebsd", goarch: "amd64"} - {go: "1.20.8", goos: "freebsd", goarch: "amd64"}
- {go: "1.20.7", goos: "windows", goarch: "386"} - {go: "1.20.8", goos: "windows", goarch: "386"}
- {go: "1.20.7", goos: "windows", goarch: "amd64"} - {go: "1.20.8", goos: "windows", goarch: "amd64"}
- {go: "1.20.7", goos: "solaris", goarch: "amd64"} - {go: "1.20.8", goos: "solaris", goarch: "amd64"}
fail-fast: true fail-fast: true
name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build
@ -182,7 +182,7 @@ jobs:
strategy: strategy:
matrix: matrix:
include: include:
- {go: "1.20.7", goos: "linux", goarch: "s390x"} - {go: "1.20.8", goos: "linux", goarch: "s390x"}
fail-fast: true fail-fast: true
name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build
@ -233,7 +233,7 @@ jobs:
matrix: matrix:
goos: [ darwin ] goos: [ darwin ]
goarch: [ "amd64", "arm64" ] goarch: [ "amd64", "arm64" ]
go: [ "1.20.7" ] go: [ "1.20.8" ]
fail-fast: true fail-fast: true
name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build name: Go ${{ matrix.go }} ${{ matrix.goos }} ${{ matrix.goarch }} build

2
build-support/docker/Build-Go.dockerfile

@ -1,7 +1,7 @@
# Copyright (c) HashiCorp, Inc. # Copyright (c) HashiCorp, Inc.
# SPDX-License-Identifier: BUSL-1.1 # SPDX-License-Identifier: BUSL-1.1
ARG GOLANG_VERSION=1.20.7 ARG GOLANG_VERSION=1.20.8
FROM golang:${GOLANG_VERSION} FROM golang:${GOLANG_VERSION}
WORKDIR /consul WORKDIR /consul

Loading…
Cancel
Save