-
Notifications
You must be signed in to change notification settings - Fork 147
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[18.09] bump golang 1.11.12 #364
Conversation
This reverts commit 9aec277. Signed-off-by: Sebastiaan van Stijn <[email protected]>
go1.11.3 (released 2018/12/14) - crypto/x509: CPU denial of service in chain validation golang/go#29233 - cmd/go: directory traversal in "go get" via curly braces in import paths golang/go#29231 - cmd/go: remote command execution during "go get -u" golang/go#29230 See the Go 1.11.3 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.11.3 Signed-off-by: Sebastiaan van Stijn <[email protected]> (cherry picked from commit 517a30b) Signed-off-by: Sebastiaan van Stijn <[email protected]>
See the milestone for details; https://github.com/golang/go/issues?q=milestone%3AGo1.11.5+label%3ACherryPickApproved Signed-off-by: Sebastiaan van Stijn <[email protected]> (cherry picked from commit a86dd09) Signed-off-by: Sebastiaan van Stijn <[email protected]>
go1.11.11 (released 2019/06/11) includes a fix to the crypto/x509 package. See the Go 1.11.11 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.11.11 Signed-off-by: Sebastiaan van Stijn <[email protected]>
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
removed "WIP" because engine/cli have been merged ping @seemethere ptal |
this needs to be updated to 1.11.12 and now depends on two more PRs: |
go1.11.12 (released 2019/07/08) includes fixes to the compiler and the linker. See the Go 1.11.12 milestone on our issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.11.12 Full diff: golang/go@go1.11.11...go1.11.12 Signed-off-by: Kir Kolyshkin <[email protected]>
CI is failing, likely because the Golang image switched to buster;
|
cherry-picked #369 Pin Golang images to debian stretch variant |
Actually; not sure we need to pin to the stretch variant, because we only copy the go binaries from the image 🤔 |
Signed-off-by: Sebastiaan van Stijn <[email protected]> (cherry picked from commit 1310e39) Signed-off-by: Sebastiaan van Stijn <[email protected]>
7f0965c
to
32cdb89
Compare
oh, never mind; we do use the golang image for the image variant; docker-ce-packaging/image/Dockerfile.engine Lines 3 to 15 in 06ff8d1
|
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just like I said in #369 this is a fine intermediary step while we figure out the changes necessary to move to the buster
versions of these images.
LGTM for now.
depends on: