Skip to content

chore: Bump /x/crypto and /x/oauth2#52436

Merged
codingllama merged 2 commits intomasterfrom
codingllama/bump-golang-x
Feb 24, 2025
Merged

chore: Bump /x/crypto and /x/oauth2#52436
codingllama merged 2 commits intomasterfrom
codingllama/bump-golang-x

Conversation

@codingllama
Copy link
Copy Markdown
Contributor

Updates:

Announcements:

Changelog: Updated /x/crypto and /x/oauth2 (addresses CVE-2025-22869 and CVE-2025-22868)

Comment thread api/go.mod
module github.com/gravitational/teleport/api

go 1.22.7
go 1.23.0
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is now the min version required by both /x/ libs.

go.opentelemetry.io/otel/trace v1.22.0 // indirect
go.opentelemetry.io/proto/otlp v1.1.0 // indirect
golang.org/x/crypto v0.31.0 // indirect
golang.org/x/crypto v0.35.0 // indirect
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've touched everything to avoid scanner false positives, even though arguably examples/ don't matter.

@codingllama
Copy link
Copy Markdown
Contributor Author

I'll do the backports manually, the chances the bot would get this right are pretty slim.

@codingllama codingllama added this pull request to the merge queue Feb 24, 2025
Merged via the queue into master with commit 97fa070 Feb 24, 2025
@codingllama codingllama deleted the codingllama/bump-golang-x branch February 24, 2025 20:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants