Skip to content

Conversation

@julio-lopez
Copy link
Collaborator

@julio-lopez julio-lopez commented Jan 22, 2025

Temporarily remove requirement for dependents on a particular Go patch version.

Adds toolchain go1.22.11 to ensure that CI uses a minimum version Go standard library that has addressed known vulnerabilities, such as those reported by govulncheck.

Ref:

@julio-lopez julio-lopez changed the title deps(go): upgrade grpc and opentelemetry dependencies. build(go): upgrade grpc and opentelemetry dependencies Jan 22, 2025
@julio-lopez julio-lopez changed the title build(go): upgrade grpc and opentelemetry dependencies build(deps): upgrade grpc and opentelemetry dependencies Jan 22, 2025
@codecov
Copy link

codecov bot commented Jan 22, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 76.32%. Comparing base (cb455c6) to head (0e1df16).
Report is 398 commits behind head on master.

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #4353      +/-   ##
==========================================
+ Coverage   75.86%   76.32%   +0.45%     
==========================================
  Files         470      527      +57     
  Lines       37301    39920    +2619     
==========================================
+ Hits        28299    30467    +2168     
- Misses       7071     7445     +374     
- Partials     1931     2008      +77     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

@julio-lopez julio-lopez changed the title build(deps): upgrade grpc and opentelemetry dependencies DO NOT MERGE Jan 22, 2025
@julio-lopez julio-lopez changed the title DO NOT MERGE build(deps): Drop Go patch version to 1.22.0 Jan 22, 2025
Remove Go patch version requirement for dependents.

Adds `toolchain go1.22.11` to ensure that CI uses a minimum version Go
standard library that has addressed known vulnerabilities, such as those
reported by `govulncheck`
@julio-lopez julio-lopez changed the title build(deps): Drop Go patch version to 1.22.0 build(deps): drop Go patch version to 1.22.0 Jan 22, 2025
@julio-lopez julio-lopez marked this pull request as ready for review January 22, 2025 18:14
@julio-lopez julio-lopez merged commit 763e640 into kopia:master Jan 22, 2025
30 checks passed
@julio-lopez julio-lopez deleted the rm-go-patch-version branch January 22, 2025 18:15
Lyndon-Li pushed a commit to Lyndon-Li/kopia that referenced this pull request Jan 23, 2025
Remove Go patch version requirement for dependents.

Adds `toolchain go1.22.11` to ensure that CI uses a minimum version Go
standard library that has addressed known vulnerabilities, such as those
reported by govulncheck
Lyndon-Li pushed a commit to Lyndon-Li/kopia that referenced this pull request Jan 23, 2025
Remove Go patch version requirement for dependents.

Adds `toolchain go1.22.11` to ensure that CI uses a minimum version Go
standard library that has addressed known vulnerabilities, such as those
reported by govulncheck
Lyndon-Li pushed a commit to Lyndon-Li/kopia that referenced this pull request Jan 23, 2025
Remove Go patch version requirement for dependents.

Adds `toolchain go1.22.11` to ensure that CI uses a minimum version Go
standard library that has addressed known vulnerabilities, such as those
reported by govulncheck
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

deps: Remove Go patch version from go.mods

1 participant