chore(security) : upgrade golang to 1.22.5 to fix CVE (#1102)

* upgrade golang to 1.22.5 to fix CVE * upgrade golang to 1.22.5 to fix CVE
sourcegraph · Jul 12, 2024 · f17af31 · f17af31
1 parent 3e384c4
commit f17af31
Show file tree

Hide file tree

Showing 8 changed files with 8 additions and 8 deletions.
diff --git a/.github/workflows/go-ci.yml b/.github/workflows/go-ci.yml
@@ -7,7 +7,7 @@ jobs:
   go-test:
     strategy:
       matrix:
-        go-version: [1.22.2]
+        go-version: [1.22.5]
         os: [ubuntu-latest, macos-latest, windows-latest]
     runs-on: ${{ matrix.os }}
     steps:

diff --git a/.github/workflows/go-lint.yml b/.github/workflows/go-lint.yml
@@ -12,5 +12,5 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.22.2
+          go-version: 1.22.5
       - run: ./dev/go-lint.sh
diff --git a/.github/workflows/goreleaser-check.yml b/.github/workflows/goreleaser-check.yml
@@ -16,7 +16,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.22.2
+          go-version: 1.22.5
       - name: Check GoReleaser config
         uses: goreleaser/goreleaser-action@v5
         with:

diff --git a/.github/workflows/goreleaser.yml b/.github/workflows/goreleaser.yml
@@ -177,7 +177,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.22
+          go-version: 1.22.5
       - run: go test ./...
       - run: go test -race -v ./...
       - run: echo "${DOCKER_PASSWORD}" | docker login -u=$DOCKER_USERNAME --password-stdin

diff --git a/.github/workflows/pr-auditor.yml b/.github/workflows/pr-auditor.yml
@@ -13,7 +13,7 @@ jobs:
         with:
           repository: 'sourcegraph/pr-auditor'
       - uses: actions/setup-go@v5
-        with: { go-version: '1.22.2' }
+        with: { go-version: '1.22.5' }
 
       - run: './check-pr.sh'
         env:

diff --git a/.tool-versions b/.tool-versions
@@ -1,3 +1,3 @@
-golang 1.22.3
+golang 1.22.5
 shfmt 3.8.0
 shellcheck 0.10.0
diff --git a/Dockerfile b/Dockerfile
@@ -4,7 +4,7 @@
 #
 # Nothing fancy here: we copy in the source code and build on the Alpine Go
 # image. Refer to .dockerignore to get a sense of what we're not going to copy.
-FROM golang:1.22.3-alpine@sha256:df479aa7d1298917c7de7fd56c7231ec450149f1e63d960ea96aebf9ff9240c5 as builder
+FROM golang:1.22.3-alpine@sha256:4707c052e5bd90c1c6ae16d1825e3ea5076ec1b06de30e34596b1e6f6b9916cf as builder
 
 COPY . /src
 WORKDIR /src

diff --git a/go.mod b/go.mod
@@ -2,7 +2,7 @@ module github.com/sourcegraph/src-cli
 
 go 1.22
 
-toolchain go1.22.2
+toolchain go1.22.5
 
 require (
 	cloud.google.com/go/storage v1.30.1