Update golang to 1.18.5

Update Go runtime to 1.18.5 to address CVE-2022-32189.

Full diff: https://github.com/golang/go/compare/go1.18.4...go1.18.5

--------------------------------------------------------

From the security announcement:
https://groups.google.com/g/golang-announce/c/YqYYG87xB10

We have just released Go versions 1.18.5 and 1.17.13, minor point
releases.

These minor releases include 1 security fixes following the security
policy:

encoding/gob & math/big: decoding big.Float and big.Rat can panic

Decoding big.Float and big.Rat types can panic if the encoded message is
too short.

This is CVE-2022-32189 and Go issue https://go.dev/issue/53871.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.18.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
This commit is contained in:
Sebastiaan van Stijn 2022-08-03 20:15:57 +02:00
parent 5c511f4f85
commit 6191b662b3
No known key found for this signature in database
GPG Key ID: 76698F39D527CE8C
6 changed files with 6 additions and 6 deletions

View File

@ -59,7 +59,7 @@ jobs:
name: Set up Go
uses: actions/setup-go@v2
with:
go-version: 1.18.4
go-version: 1.18.5
-
name: Test
run: |

View File

@ -1,7 +1,7 @@
# syntax=docker/dockerfile:1
ARG BASE_VARIANT=alpine
ARG GO_VERSION=1.18.4
ARG GO_VERSION=1.18.5
ARG XX_VERSION=1.1.1
ARG GOVERSIONINFO_VERSION=v1.3.0
ARG GOTESTSUM_VERSION=v1.7.0

View File

@ -1,5 +1,5 @@
variable "GO_VERSION" {
default = "1.18.4"
default = "1.18.5"
}
variable "VERSION" {
default = ""

View File

@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1
ARG GO_VERSION=1.18.4
ARG GO_VERSION=1.18.5
ARG BUILDX_VERSION=0.8.2
FROM docker/buildx-bin:${BUILDX_VERSION} AS buildx

View File

@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1
ARG GO_VERSION=1.18.4
ARG GO_VERSION=1.18.5
ARG GOLANGCI_LINT_VERSION=v1.45.2
FROM golangci/golangci-lint:${GOLANGCI_LINT_VERSION}-alpine AS golangci-lint

View File

@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1
ARG GO_VERSION=1.18.4
ARG GO_VERSION=1.18.5
ARG MODOUTDATED_VERSION=v0.8.0
FROM golang:${GO_VERSION}-alpine AS base