Commit Graph
14 Commits
Author SHA1 Message Date
Jim 3af259ff69 chore: update deps (#4394)
* chore: update deps

* tests: update sqlmock tests for breaking chg

* tests (handlers): sort grants in checkEqualGrants(...)

sort the expected and got grants in
checkEqualGrants(...) to make the test more
deterministic.

* tests (asciicast): update backspace enc in TestEventMarshal(...)
2024-02-13 10:50:06 -05:00
Timothy Messier c70a6ff6ba chore: Bump to Go version 1.21.5
Go 1.21.5 fixes a few vulnerabilities. Most notably for boundary is a
fix in net/http to limit chunked data overhead.

See: https://groups.google.com/g/golang-announce/c/iLGK3x6yuNo
(cherry picked from commit 575cd9d63b1ac4787d048d86b0b209c61a7f3946)
2023-12-07 19:42:45 +00:00
Damian Debkowski 3394d3e13a chore: update go mod and dependencies (#4073) 2023-11-30 11:45:00 -08:00
HugoandHugo 774832f23e chore: Bump to Go version 1.21.3 (#3820)
Go 1.21.3 fixes a vulnerability in the HTTP stack where a malicious
HTTP/2 client which rapidly creates requests and immediately resets them
can cause excessive server resource consumption.

More detail in https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo

Co-authored-by: Hugo <hugoamvieira@users.noreply.github.com>
2023-10-12 17:17:25 +01:00
Johan Brandhorst-Satzkorn 78161c0187 Revert "Revert "Upgrade Go version (#3677)"" (#3681)
This reverts commit 10837ab19569f41d272c1803bd98a70b0cd7a0df.

M
E
T
A
2023-09-06 13:48:04 -07:00
Johan Brandhorst-Satzkorn b2c0300dac Revert "Upgrade Go version (#3677)" (#3680)
This reverts commit 2b2eada393. The change
breaks out integration tests because the new Docker image is not
available yet. We'll revert this change once it is.
2023-09-06 11:53:39 -07:00
Johan Brandhorst-Satzkorn 2b2eada393 Upgrade Go version (#3677)
This avoids an RCE in the Go tooling and fixes
some JS escaping in html/template.

See https://groups.google.com/g/golang-announce/c/Fm51GRLNRvM?pli=1
for more information.
2023-09-06 11:07:44 -07:00
Johan Brandhorst-Satzkorn e108ae40ad Upgrade to Go 1.21 (#3573)
* Upgrade to Go 1.21

* event: remove tests depending on pointer comparison

The test now just tests that the logger is non-nil. For
some reason the old test was broken by upgrading
to Go 1.21.0.

* api: use dummy Host header for unix sockets

When using unix sockets with the net/http.Client,
we cannot use the unix socket address directly
in the Host header, as it fails the validation step.
Instead, use a dummy address in the Host header.
2023-08-15 12:04:58 -07:00
Johan Brandhorst-Satzkorn 43f3c6bd68 Upgrade Go version to 1.20.5 (#3293)
Go 1.20.5 contains security fixes for the runtime and the compiler
2023-06-07 10:09:43 -07:00
Johan Brandhorst-Satzkorn 4146c0c55d Upgrade Go version to 1.20 (#2898)
* chore: Upgrade Go version

* fix: Upgrade golangci-lint to support 1.20

* fix: Don't use t.SetEnv in parallel tests

This is a panic in Go 1.20 and it sounds like a recipe
for distaster in general.
2023-02-10 11:16:03 -05:00
Johan Brandhorst-Satzkorn 5d48b10123 Upgrade Go (#2699)
* fix(ci): Make goinstall read from .go-version

* Upgrade Go version

Go version 1.19.4 contains a security fix that affects all HTTP/2
servers.
2022-12-09 15:58:40 -05:00
Johan Brandhorst-Satzkorn f362bf0e1f chore: Upgrade to Go 1.19.1 (#2429) 2022-09-07 17:29:13 -04:00
Johan Brandhorst-Satzkorn aef9073fa6 Upgrade to Go 1.19 (#2347) 2022-08-25 12:12:24 -04:00
Michele Degges 63bfcaff61 [CI-only] Build updates (#2296) 2022-07-28 07:57:12 -07:00