Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Task][Before Each Release]: Ensure the Go version used for container builds is the latest available. #27897

Closed
1 of 15 tasks
lostluck opened this issue Aug 8, 2023 · 1 comment
Assignees

Comments

@lostluck
Copy link
Contributor

lostluck commented Aug 8, 2023

What needs to happen?

Go makes security patch releases of their tooling, so it's good to ensure we're up to date for each release.

This affects container bootloader security, WRT CVEs that are listed when the containers are scanned.

See if https://go.dev/doc/devel/release has a newer release. Go releases a new version every 6 months, but provides minor revision releases for security updates and bug fixes for the last two versions. It's important to be on the latest of these each release.

After creating the update PR, move this task to the next release.

TODO(lostluck): Automate making these updates.

Issue Priority

Priority: 2 (default / most normal work should be filed as P2)

Issue Components

  • Component: Python SDK
  • Component: Java SDK
  • Component: Go SDK
  • Component: Typescript SDK
  • Component: IO connector
  • Component: Beam examples
  • Component: Beam playground
  • Component: Beam katas
  • Component: Website
  • Component: Spark Runner
  • Component: Flink Runner
  • Component: Samza Runner
  • Component: Twister2 Runner
  • Component: Hazelcast Jet Runner
  • Component: Google Cloud Dataflow Runner
@lostluck lostluck added this to the 2.51.0 Release milestone Aug 8, 2023
@lostluck lostluck self-assigned this Aug 8, 2023
@github-actions github-actions bot added the P2 label Aug 8, 2023
@lostluck lostluck changed the title [Task][2.51.0]: Ensure the Go version used for container builds is the latest available. [Task][Before Each Release]: Ensure the Go version used for container builds is the latest available. Aug 10, 2023
@lostluck lostluck mentioned this issue Sep 19, 2023
3 tasks
@kennknowles
Copy link
Member

kennknowles commented Sep 25, 2023

Still at 1.21.1 and putting these instructions into the release guide.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants