Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

go: bump version to 1.22.4 #227

Merged
merged 1 commit into from
Jun 25, 2024
Merged

go: bump version to 1.22.4 #227

merged 1 commit into from
Jun 25, 2024

Conversation

radeksimko
Copy link
Member

@radeksimko radeksimko commented Jun 24, 2024

This is to suppress vulnerability scanner noise caused by https://nvd.nist.gov/vuln/detail/CVE-2024-24789

I believe that hc-install is not impacted by it as we generally unpack ZIP files we produce ourselves, rather than arbitrary ones.

We should still call it out in the Changelog though.

@radeksimko radeksimko added the dependencies Auto-pinning label Jun 24, 2024
@radeksimko radeksimko marked this pull request as ready for review June 24, 2024 09:21
@radeksimko radeksimko requested a review from a team as a code owner June 24, 2024 09:21
@james0209
Copy link
Contributor

Hey @radeksimko, is there a reason that the go.mod is still set to 1.18? Wasn't sure if it's for compatibility reasons?

go 1.18

@radeksimko
Copy link
Member Author

@james0209 As far as I'm aware, the version there just communicates compatibility and we had no reason to require higher versions and impose that to downstream, so it's mostly just path of least resistance. 🤷🏻‍♂️

@radeksimko radeksimko merged commit 3f6f9f2 into main Jun 25, 2024
11 checks passed
@radeksimko radeksimko deleted the go-version-bump branch June 25, 2024 08:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Auto-pinning
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants