From a13833cfbc45f0c840318a017223a537ff6b2a5c Mon Sep 17 00:00:00 2001 From: Jimmi Dyson Date: Mon, 15 Jul 2024 13:47:27 +0200 Subject: [PATCH] build: Use go 1.22.5 toolchain to fix CVE (#767) This was highlighted by failing govulncheck builds in other PRs. Fixes https://pkg.go.dev/vuln/GO-2024-2963. --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 94be20a3..64d1749e 100644 --- a/go.mod +++ b/go.mod @@ -5,7 +5,7 @@ module github.com/mesosphere/mindthegap go 1.22.0 -toolchain go1.22.4 +toolchain go1.22.5 // TODO: This could be removed after https://github.com/mholt/archiver/pull/396 merged replace github.com/mholt/archiver/v3 => github.com/anchore/archiver/v3 v3.5.2