-
Notifications
You must be signed in to change notification settings - Fork 3.8k
[release/1.7] go.mod: golang.org/x/crypto v0.45.0 (drop support for Go 1.23) #12640
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
mikebrow
left a comment
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
|
Sorry, can you rebase on |
| module github.com/containerd/containerd | ||
|
|
||
| go 1.23.0 | ||
| go 1.24.0 |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was an earlier discussion on changing the minimum go version on an existing release branch and we didnt want to do this bump cc: @thaJeztah
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
It is fine since 1.23 is not in support and this is a transitive requirement. So if we accept the v0.45.0 version, we are also accepting the 1.24 minimum.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Discussed with Mike on this, updating the minimum version will be the best way forward.
Updates BUILDING.md to specify that the project supports the two most recent major Go versions, rather than hardcoding "1.22.x or above" (as we don't support 1.22). This ensures the documentation doesn't become outdated when new Go versions are released. Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com> (cherry picked from commit fb28794) Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
Silence the following govulncheck reports
("you import and 3 vulnerabilities in modules you require, but your code doesn't appear to call these vulnerabilities"):
This commit also drops the support for Go 1.23, and cherry-picks: