Skip to content

security: update go version to 1.20.4#17240

Merged
jmurret merged 5 commits intomainfrom
jm/NET-3781
May 8, 2023
Merged

security: update go version to 1.20.4#17240
jmurret merged 5 commits intomainfrom
jm/NET-3781

Conversation

@jmurret
Copy link
Member

@jmurret jmurret commented May 8, 2023

Changes proposed in this PR:

Resolves CVES: GHSA-fp86-2355-v99r, GHSA-v4m2-x4rp-hv22, GHSA-8v5j-pwr7-w5f8, GHSA-9f7g-gqwh-jpf5, plus additional CVEs resolved with Go 1.19.9.
Resolves dependabot PRs hashicorp/consul-k8s#2096, hashicorp/consul-k8s#1987, hashicorp/consul-k8s#1986

PR Checklist

  • external facing docs updated
  • appropriate backport labels added

@jmurret jmurret added backport/1.13 backport/1.15 This release series is no longer active on CE. Use backport/ent/1.15. labels May 8, 2023
@github-actions github-actions bot added theme/contributing Additions and enhancements to community contributing materials type/ci Relating to continuous integration (CI) tooling for testing or releases labels May 8, 2023
@jmurret jmurret marked this pull request as ready for review May 8, 2023 16:12
@jmurret jmurret requested a review from a team May 8, 2023 16:12
@jmurret jmurret requested a review from a team as a code owner May 8, 2023 16:12
@jmurret jmurret requested review from DanStough, claire-labry and marianoasselborn and removed request for a team May 8, 2023 16:12
@jmurret jmurret changed the title update go version to 1.20.3 security: update go version to 1.20.3 May 8, 2023
Copy link
Contributor

@DanStough DanStough left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Go 1.20.4 is available; I think we should make sure we use the latest.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

IICR, the underscore convention is for Enterprise only changes

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ooh! thank you!

@jmurret
Copy link
Member Author

jmurret commented May 8, 2023

Go 1.20.4 is available; I think we should make sure we use the latest.

Cool, yes. the task is just outdated. I'll update this.

@jmurret jmurret changed the title security: update go version to 1.20.3 security: update go version to 1.20.4 May 8, 2023
@jmurret jmurret requested a review from DanStough May 8, 2023 17:04
Copy link
Contributor

@DanStough DanStough left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

Copy link
Contributor

@DanStough DanStough left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🚀

jmurret added a commit that referenced this pull request May 8, 2023
* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4
jmurret added a commit that referenced this pull request May 8, 2023
* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4
jmurret added a commit that referenced this pull request May 8, 2023
* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4
jmurret added a commit that referenced this pull request May 8, 2023
…#17245)

* no-op commit due to failed cherry-picking

* security: update go version to 1.20.4 (#17240)

* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4

---------

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: John Murret <john.murret@hashicorp.com>
jmurret added a commit that referenced this pull request May 8, 2023
…#17244)

* no-op commit due to failed cherry-picking

* security: update go version to 1.20.4 (#17240)

* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4

---------

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: John Murret <john.murret@hashicorp.com>
jmurret added a commit that referenced this pull request May 9, 2023
…#17243)

* no-op commit due to failed cherry-picking

* security: update go version to 1.20.4 (#17240)

* update go version to 1.20.3

* add changelog

* rename changelog file to remove underscore

* update to use 1.20.4

* update change log entry to reflect 1.20.4

* upgrading to 1.20

* [OSS] security: update go to 1.20.1 (#16263)

* security: update go to 1.20.1

* fixing auto_config_endpoint_test that was merged incorrectly

* go mod tidy

* fixing auto_config_endpoint_test that was merged incorrectly

* updating linter to 1.51.1

* go mod tidy on api

* go mod tidy

* removes ioutil usage everywhere which was deprecated in go1.16 (#15297)

* update go version to 1.18 for api and sdk, go mod tidy
* removes ioutil usage everywhere which was deprecated in go1.16 in favour of io and os packages. Also introduces a lint rule which forbids use of ioutil going forward.
Co-authored-by: R.B. Boyer <4903+rboyer@users.noreply.github.com>

* go mod tidy

* getting rd of net in imports

* get rid of use of math.rand

* get rid of use of math/rand in audo_config_endpoint_test.go

* update leader test

---------

Co-authored-by: temp <temp@hashicorp.com>
Co-authored-by: John Murret <john.murret@hashicorp.com>
Co-authored-by: Dan Stough <dan.stough@hashicorp.com>
Co-authored-by: Kyle Schochenmaier <kschoche@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport/1.15 This release series is no longer active on CE. Use backport/ent/1.15. theme/contributing Additions and enhancements to community contributing materials type/ci Relating to continuous integration (CI) tooling for testing or releases

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants