29 Commits
Author SHA1 Message Date
shadowdaoandClaude Sonnet 5.5 cc16bf9f74 Bump Go to 1.26.9 and patch known vulnerabilities
- go directive and .go-version 1.26.5 -> 1.26.9 in all 14 modules
  (clears Go stdlib advisories in net/http, crypto/tls, html/template,
  net/textproto, encoding/xml, encoding/asn1, net/url)
- golang.org/x/net v0.58.0 -> v0.60.0
- aws plugin: aws-sdk-go-v2 eventstream v1.7.8, s3 v1.97.3

govulncheck: 0 reachable vulnerabilities across all modules.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
2026-10-12 09:37:24 -07:00
Michael Li d6d7d2a5c3 chore: Bump to go version 1.26.5 (#6770) 2026-07-30 12:33:21 -04:00
Michael Li 9df1fad7d0 chore: Bump go version to 1.26.4 (#6750)
* chore: Bump to go version 1.26.4

* chore: Bump golangci-lint version

* fix: Update URL to be ipv6 safe
2026-06-03 16:09:39 -04:00
Damian Debkowski a4f88e7888 chore: update go version to 1.25.7 (#6404) 2026-02-05 15:48:46 -05:00
Irena Rindos 76f242c6c9 chore: update go version to 1.25.5 (#6352)
* chore: update go version to 1.25.5

* NetIp parsing has changed, updated ldap ipv6 test
2026-01-21 15:28:32 -05:00
Johan Brandhorst-Satzkorn 21fce7c5eb Update Go version to 1.25.1 (#6013)
Note that we do not need to update the go version
in our go.mod files - the meaning of that does not
change with a patch update.
2025-09-03 15:44:42 -04:00
Johan Brandhorst-Satzkorn 30d97687b5 Upgrade Go to 1.25 (#6011)
* Upgrade Go to 1.25

* Upgrade to golangci-lint v2

* Remove use of apt-key
2025-09-02 18:27:22 -04:00
Hugo 612e60f6e8 chore: Update nodeenrollment (#5863) 2025-06-19 12:55:12 +01:00
Johan Brandhorst-Satzkorn 3a49c8c483 Update golang.org deps and Go version (#5595)
* Update golang.org deps and Go version

* Upgrade golangci-lint

* all: fix new vet warnings

https://github.com/golang/go/issues/60529 introduced a new
vet warning for when format strings are used without arguments,
which is technically a bug since it shouldn't be using the functions
taking format string arguments in those cases.
2025-03-17 09:45:22 -07:00
Louis Ruch 088564c385 feat(aws): Update plugin dep (#5288)
* feat(aws): Update plugin dep

* chore: Update go version
2024-11-27 13:03:53 -08:00
Michael Gaffney 68c83eb419 chore: Bump to Go version 1.23.1
Go 1.23.1 includes security fixes to the encoding/gob,
go/build/constraint, and go/parser packages, as well as bug fixes to the
compiler, the go command, the runtime, and the database/sql, go/types,
os, runtime/trace, and unique packages.

See: https://groups.google.com/g/golang-announce/c/K-cEzDeCtpc
2024-09-09 13:41:49 -04:00
Johan Brandhorst-Satzkorn 6c4db8b6c0 all: upgrade Go to 1.23.0 2024-08-15 12:23:12 -07:00
Johan Brandhorst-Satzkorn 96052c6a06 Upgrade Go version (#4923)
This fixes a security vulnerability in net/http, CVE-2024-24791.
2024-07-08 10:13:00 -07:00
Michael Li e8e19df872 chore: Update net dependency (#4595)
Addresses GO-2024-2687/CVE-2023-45288
2024-04-04 16:03:38 -04:00
Michael Li 8b8be0c1a7 chore: Update go version to 1.22.1 (#4500)
Addresses CVE-2024-24783, CVE-2023-45290, CVE-2023-45289, CVE-2024-24785, CVE-2024-24784
2024-03-08 12:49:48 -05:00
Jim 3af259ff69 chore: update deps (#4394)
* chore: update deps

* tests: update sqlmock tests for breaking chg

* tests (handlers): sort grants in checkEqualGrants(...)

sort the expected and got grants in
checkEqualGrants(...) to make the test more
deterministic.

* tests (asciicast): update backspace enc in TestEventMarshal(...)
2024-02-13 10:50:06 -05:00
Timothy Messier c70a6ff6ba chore: Bump to Go version 1.21.5
Go 1.21.5 fixes a few vulnerabilities. Most notably for boundary is a
fix in net/http to limit chunked data overhead.

See: https://groups.google.com/g/golang-announce/c/iLGK3x6yuNo
(cherry picked from commit 575cd9d63b1ac4787d048d86b0b209c61a7f3946)
2023-12-07 19:42:45 +00:00
Damian Debkowski 3394d3e13a chore: update go mod and dependencies (#4073) 2023-11-30 11:45:00 -08:00
HugoandHugo 774832f23e chore: Bump to Go version 1.21.3 (#3820)
Go 1.21.3 fixes a vulnerability in the HTTP stack where a malicious
HTTP/2 client which rapidly creates requests and immediately resets them
can cause excessive server resource consumption.

More detail in https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo

Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com>
2023-10-12 17:17:25 +01:00
Johan Brandhorst-Satzkorn 78161c0187 Revert "Revert "Upgrade Go version (#3677)"" (#3681)
This reverts commit 10837ab19569f41d272c1803bd98a70b0cd7a0df.

M
E
T
A
2023-09-06 13:48:04 -07:00
Johan Brandhorst-Satzkorn b2c0300dac Revert "Upgrade Go version (#3677)" (#3680)
This reverts commit 2b2eada393. The change
breaks out integration tests because the new Docker image is not
available yet. We'll revert this change once it is.
2023-09-06 11:53:39 -07:00
Johan Brandhorst-Satzkorn 2b2eada393 Upgrade Go version (#3677)
This avoids an RCE in the Go tooling and fixes
some JS escaping in html/template.

See https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM?pli=1
for more information.
2023-09-06 11:07:44 -07:00
Johan Brandhorst-Satzkorn e108ae40ad Upgrade to Go 1.21 (#3573)
* Upgrade to Go 1.21

* event: remove tests depending on pointer comparison

The test now just tests that the logger is non-nil. For
some reason the old test was broken by upgrading
to Go 1.21.0.

* api: use dummy Host header for unix sockets

When using unix sockets with the net/http.Client,
we cannot use the unix socket address directly
in the Host header, as it fails the validation step.
Instead, use a dummy address in the Host header.
2023-08-15 12:04:58 -07:00
Johan Brandhorst-Satzkorn 43f3c6bd68 Upgrade Go version to 1.20.5 (#3293)
Go 1.20.5 contains security fixes for the runtime and the compiler
2023-06-07 10:09:43 -07:00
Johan Brandhorst-Satzkorn 4146c0c55d Upgrade Go version to 1.20 (#2898)
* chore: Upgrade Go version

* fix: Upgrade golangci-lint to support 1.20

* fix: Don't use t.SetEnv in parallel tests

This is a panic in Go 1.20 and it sounds like a recipe
for distaster in general.
2023-02-10 11:16:03 -05:00
Johan Brandhorst-Satzkorn 5d48b10123 Upgrade Go (#2699)
* fix(ci): Make goinstall read from .go-version

* Upgrade Go version

Go version 1.19.4 contains a security fix that affects all HTTP/2
servers.
2022-12-09 15:58:40 -05:00
Johan Brandhorst-Satzkorn f362bf0e1f chore: Upgrade to Go 1.19.1 (#2429) 2022-09-07 17:29:13 -04:00
Johan Brandhorst-Satzkorn aef9073fa6 Upgrade to Go 1.19 (#2347) 2022-08-25 12:12:24 -04:00
Michele Degges 63bfcaff61 [CI-only] Build updates (#2296) 2022-07-28 07:57:12 -07:00