Skip to content

Commit 8ff815d

Browse files
authored
Backport v5.4: upgrade min go version to 1.23.6 to fix std lib crypto vulnerabilities (#3684)
* Backport v5.4: upgrade min go version to 1.23.6 to fix std lib crypto vulnerabilities
1 parent 756f91f commit 8ff815d

File tree

3 files changed

+12
-2
lines changed

3 files changed

+12
-2
lines changed

Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,5 @@
11
# golang alpine
2-
FROM golang:1.23.5-alpine as builder
2+
FROM golang:1.23.6-alpine AS builder
33

44
ARG TARGETARCH
55
ARG TARGETOS

docs/pages/release_notes.rst

Lines changed: 10 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -3,6 +3,16 @@
33
Release notes
44
#############
55

6+
*************************
7+
Hazelnut update (v5.4.15)
8+
*************************
9+
10+
Release date: 2025-02-07
11+
12+
- Update minimal GO version to 1.23.6 to fix vulnerabilities in standard library crypto package.
13+
14+
**Full Changelog**: https://github.com/nuts-foundation/nuts-node/compare/v5.4.14...v5.4.15
15+
616
*************************
717
Hazelnut update (v5.4.14)
818
*************************

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@ module github.com/nuts-foundation/nuts-node
22

33
// This is the minimal version, the actual go version is determined by the images in the Dockerfile
44
// This version is used in automated tests such as the 'Scheduled govulncheck' action
5-
go 1.23.5
5+
go 1.23.6
66

77
require (
88
github.com/alicebob/miniredis/v2 v2.33.0

0 commit comments

Comments
 (0)