Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[main] Bump go to 1.24.1 #10681

Merged
merged 3 commits into from
Mar 6, 2025
Merged

[main] Bump go to 1.24.1 #10681

merged 3 commits into from
Mar 6, 2025

Conversation

bewebi
Copy link

@bewebi bewebi commented Mar 5, 2025

Description

  • Bump go to 1.24.1
    • Bump cloud-builders to 0.12.1, corresponding with the same Go bump

Context

golang/go#71984 describes CVE-2025-22870 which is patched in go1.24.1

The CVE is not yet picked up in trivy scans

Testing steps

Because the CVE is not yet picked up in trivy scans, we do not have anything to "test" against

Checklist:

  • I have performed a self-review of my own code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have added tests that prove my fix is effective or that my feature works

@solo-changelog-bot
Copy link

Issues linked to changelog:
https://github.com/solo-io/solo-projects/issues/7958

Copy link

github-actions bot commented Mar 5, 2025

Visit the preview URL for this PR (updated for commit 0453321):

https://gloo-edge--pr10681-go-cve-bump-main-9q69a1cu.web.app

(expires Wed, 12 Mar 2025 20:41:52 GMT)

🔥 via Firebase Hosting GitHub Action 🌎

Sign: 77c2b86e287749579b7ff9cadb81e099042ef677

@soloio-bulldozer soloio-bulldozer bot merged commit afcfa20 into main Mar 6, 2025
20 checks passed
@soloio-bulldozer soloio-bulldozer bot deleted the go-cve-bump-main branch March 6, 2025 18:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants