Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update go version to 1.23.5 [SECURITY] #198

Merged
merged 1 commit into from
Feb 4, 2025

Conversation

turkenf
Copy link
Collaborator

@turkenf turkenf commented Feb 4, 2025

Description of your changes

This PR updates go.mod dependencies to fix the following:

Name Change Type Vulnerability Severity
stdlib go1.23.3 -> go1.23.5 go-module CVE-2024-45341 Medium
stdlib go1.23.3 -> go1.23.5 go-module CVE-2024-45336 Medium

I have:

  • Read and followed Crossplane's contribution process.
  • Run make reviewable to ensure this PR is ready for review.
  • Added backport release-x.y labels to auto-backport this PR if necessary.

How has this code been tested

@turkenf
Copy link
Collaborator Author

turkenf commented Feb 4, 2025

/test-examples="examples/conditionalaccess/v1beta2/location.yaml"

@turkenf
Copy link
Collaborator Author

turkenf commented Feb 4, 2025

/test-examples="examples/applications/v1beta1/application.yaml"

Copy link
Collaborator

@sergenyalcin sergenyalcin left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks @turkenf LGTM!

@turkenf turkenf marked this pull request as ready for review February 4, 2025 13:55
@turkenf turkenf requested a review from ulucinar as a code owner February 4, 2025 13:55
@turkenf turkenf merged commit 5e2ebb2 into crossplane-contrib:main Feb 4, 2025
10 checks passed
Copy link

github-actions bot commented Feb 4, 2025

Backport failed for release-1.6, because it was unable to cherry-pick the commit(s).

Please cherry-pick the changes locally and resolve any conflicts.

git fetch origin release-1.6
git worktree add -d .worktree/backport-198-to-release-1.6 origin/release-1.6
cd .worktree/backport-198-to-release-1.6
git switch --create backport-198-to-release-1.6
git cherry-pick -x bf875bca747864cee028493c461dbfb9e145ffe3

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants