Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

security: Upgrade go version to 1.22.12 #22132

Merged
merged 3 commits into from
Feb 11, 2025
Merged

security: Upgrade go version to 1.22.12 #22132

merged 3 commits into from
Feb 11, 2025
+26 −22

Conversation

abhishek-hashicorp
Copy link
Contributor

@abhishek-hashicorp abhishek-hashicorp commented Feb 11, 2025 •
edited
Loading

Description

Upgrade Go to use v1.22.12 and bump Go X-Repositories to latest. This addresses CVE
CVE-2025-22866

Testing & Reproduction steps

Links

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

@abhishek-hashicorp abhishek-hashicorp requested a review from a team as a code owner February 11, 2025 06:29
@github-actions github-actions bot added theme/api Relating to the HTTP API interface pr/dependencies PR specifically updates dependencies of project labels Feb 11, 2025
@abhishek-hashicorp abhishek-hashicorp added the backport/all Apply backports for all active releases per .release/versions.hcl label Feb 11, 2025
sreeram77
sreeram77 previously approved these changes Feb 11, 2025
View reviewed changes
@abhishek-hashicorp abhishek-hashicorp enabled auto-merge (squash) February 11, 2025 08:29
nitin-sachdev-29
nitin-sachdev-29 approved these changes Feb 11, 2025
View reviewed changes
Copy link
Contributor

@nitin-sachdev-29 nitin-sachdev-29 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@abhishek-hashicorp abhishek-hashicorp merged commit cf16828 into main Feb 11, 2025
92 of 94 checks passed
@abhishek-hashicorp abhishek-hashicorp deleted the abhishek/fix-cve branch February 11, 2025 08:31
@hc-github-team-consul-core hc-github-team-consul-core added backport/1.20 Changes are backported to 1.20 backport/ent/1.15 Changes are backported to 1.15 ent backport/ent/1.18 Changes are backported to 1.18 ent backport/ent/1.19 Changes are backported to 1.19 ent labels Feb 11, 2025
@hc-github-team-consul-core hc-github-team-consul-core mentioned this pull request Feb 11, 2025
Merged
4 tasks
@abhishek-hashicorp abhishek-hashicorp restored the abhishek/fix-cve branch February 11, 2025 09:03
@hc-github-team-consul-core
Copy link
Collaborator

📣 Hi @abhishek-hashicorp! a backport is missing for this PR [22132] for versions [1.15,1.18,1.19] please perform the backport manually and add the following snippet to your backport PR description:

<details>
	<summary> Overview of commits </summary>
		- <<backport commit 1>>
		- <<backport commit 2>>
		...
</details>

@abhishek-hashicorp abhishek-hashicorp removed backport/ent/1.15 Changes are backported to 1.15 ent backport/ent/1.18 Changes are backported to 1.18 ent backport/ent/1.19 Changes are backported to 1.19 ent labels Feb 11, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@nitin-sachdev-29 nitin-sachdev-29 nitin-sachdev-29 approved these changes

@sreeram77 sreeram77 sreeram77 left review comments

Assignees
No one assigned
Labels
backport/all Apply backports for all active releases per .release/versions.hcl backport/1.20 Changes are backported to 1.20 pr/dependencies PR specifically updates dependencies of project theme/api Relating to the HTTP API interface
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
4 participants
@abhishek-hashicorp @hc-github-team-consul-core @sreeram77 @nitin-sachdev-29