Skip to content

Backport of security: Upgrade go version to 1.22.12 into release/1.20.x#22133

Merged
abhishek-hashicorp merged 3 commits into
release/1.20.xfrom
backport/abhishek/fix-cve/generally-humble-sunbeam
Feb 11, 2025
Merged

Backport of security: Upgrade go version to 1.22.12 into release/1.20.x#22133
abhishek-hashicorp merged 3 commits into
release/1.20.xfrom
backport/abhishek/fix-cve/generally-humble-sunbeam

Conversation

@hc-github-team-consul-core
Copy link
Copy Markdown
Collaborator

Backport

This PR is auto-generated from #22132 to be assessed for backporting due to the inclusion of the label backport/1.20.

The below text is copied from the body of the original PR.


Description

Upgrade Go to use v1.22.11 and bump Go X-Repositories to latest. This addresses CVE
CVE-2025-22866

Testing & Reproduction steps

Links

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

Overview of commits

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto approved Consul Bot automated PR

@github-actions github-actions Bot added theme/api Relating to the HTTP API interface pr/dependencies PR specifically updates dependencies of project labels Feb 11, 2025
@abhishek-hashicorp abhishek-hashicorp merged commit d490035 into release/1.20.x Feb 11, 2025
@abhishek-hashicorp abhishek-hashicorp deleted the backport/abhishek/fix-cve/generally-humble-sunbeam branch February 11, 2025 08:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr/dependencies PR specifically updates dependencies of project theme/api Relating to the HTTP API interface

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants