Skip to content

Commit 8aeb3ab

Browse files
authored
[chore] Upgrade go version in CI (#8172)
To resolve the govulncheck reports: ``` Vulnerability #1: GO-2023-1987 Large RSA keys can cause high CPU usage in crypto/tls More info: https://pkg.go.dev/vuln/GO-2023-1987 Standard library Found in: crypto/[email protected] Fixed in: crypto/[email protected] Example traces found: Error: #1: service/internal/proctelemetry/config.go:299:27: proctelemetry.initOTLPgRPCExporter calls otlpmetricgrpc.New, which eventually calls tls.Conn.Handshake Error: #2: service/internal/proctelemetry/config.go:156:39: proctelemetry.InitPrometheusServer calls http.Server.ListenAndServe, which eventually calls tls.Conn.HandshakeContext Error: #3: service/service.go:251:36: service.buildResource calls uuid.NewRandom, which eventually calls tls.Conn.Read Error: #4: service/config.go:35:13: service.Config.Validate calls fmt.Printf, which eventually calls tls.Conn.Write Error: #5: service/telemetry/telemetry.go:32:28: telemetry.Telemetry.Shutdown calls trace.TracerProvider.Shutdown, which eventually calls tls.Dialer.DialContext ``` https://github.com/open-telemetry/opentelemetry-collector/actions/runs/5753675727/job/15597394973?pr=8144
1 parent 611a589 commit 8aeb3ab

11 files changed

+15
-15
lines changed

.github/workflows/api-compatibility.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
- name: Setup Go
3232
uses: actions/setup-go@v4
3333
with:
34-
go-version: ~1.19.11
34+
go-version: ~1.19.12
3535

3636
# Generate apidiff states of Main
3737
- name: Generate-States

.github/workflows/build-and-test-windows.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
- name: Setup Go
2020
uses: actions/setup-go@v4
2121
with:
22-
go-version: ~1.19.11
22+
go-version: ~1.19.12
2323
- name: Cache Go
2424
uses: actions/cache@v3
2525
env:

.github/workflows/build-and-test.yml

+5-5
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
- name: Setup Go
2020
uses: actions/setup-go@v4
2121
with:
22-
go-version: ~1.19.11
22+
go-version: ~1.19.12
2323
- name: Cache Go
2424
id: go-cache
2525
uses: actions/cache@v3
@@ -41,7 +41,7 @@ jobs:
4141
- name: Setup Go
4242
uses: actions/setup-go@v4
4343
with:
44-
go-version: ~1.19.11
44+
go-version: ~1.19.12
4545
- name: Cache Go
4646
id: go-cache
4747
uses: actions/cache@v3
@@ -64,7 +64,7 @@ jobs:
6464
- name: Setup Go
6565
uses: actions/setup-go@v4
6666
with:
67-
go-version: ~1.19.11
67+
go-version: ~1.19.12
6868
- name: Cache Go
6969
id: go-cache
7070
uses: actions/cache@v3
@@ -88,7 +88,7 @@ jobs:
8888
- name: Setup Go
8989
uses: actions/setup-go@v4
9090
with:
91-
go-version: ~1.19.11
91+
go-version: ~1.19.12
9292
- name: Cache Go
9393
id: go-cache
9494
uses: actions/cache@v3
@@ -233,7 +233,7 @@ jobs:
233233
- name: Setup Go
234234
uses: actions/setup-go@v4
235235
with:
236-
go-version: ~1.19.11
236+
go-version: ~1.19.12
237237
- name: Cache Go
238238
id: go-cache
239239
uses: actions/cache@v3

.github/workflows/builder-integration-test.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -30,6 +30,6 @@ jobs:
3030
- name: Setup Go
3131
uses: actions/setup-go@v4
3232
with:
33-
go-version: ~1.19.11
33+
go-version: ~1.19.12
3434
- name: Test
3535
run: make builder-integration-test

.github/workflows/builder-release.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
- name: Setup Go
1717
uses: actions/setup-go@v4
1818
with:
19-
go-version: ~1.19.11
19+
go-version: ~1.19.12
2020
- name: Run GoReleaser
2121
uses: goreleaser/goreleaser-action@v4
2222
with:

.github/workflows/changelog.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
- name: Setup Go
2828
uses: actions/setup-go@v4
2929
with:
30-
go-version: ~1.19.11
30+
go-version: ~1.19.12
3131
- name: Cache Go
3232
id: go-cache
3333
uses: actions/cache@v3

.github/workflows/codeql-analysis.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
- name: Setup Go
2020
uses: actions/setup-go@v4
2121
with:
22-
go-version: ~1.19.11
22+
go-version: ~1.19.12
2323

2424
# Initializes the CodeQL tools for scanning.
2525
- name: Initialize CodeQL

.github/workflows/contrib-tests.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -23,7 +23,7 @@ jobs:
2323
- name: Setup Go
2424
uses: actions/setup-go@v4
2525
with:
26-
go-version: ~1.19.11
26+
go-version: ~1.19.12
2727
- name: Run Contrib Tests
2828
run: |
2929
contrib_path=/tmp/opentelemetry-collector-contrib

.github/workflows/create-dependabot-pr.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ jobs:
1111
- name: Setup Go
1212
uses: actions/setup-go@v4
1313
with:
14-
go-version: ~1.19.11
14+
go-version: ~1.19.12
1515
- name: Run dependabot-pr.sh
1616
run: ./.github/workflows/scripts/dependabot-pr.sh
1717
env:

.github/workflows/perf.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@ jobs:
1313
- name: Setup Go
1414
uses: actions/setup-go@v4
1515
with:
16-
go-version: ~1.19.11
16+
go-version: ~1.19.12
1717

1818
- name: Run benchmark
1919
run: make gobenchmark

.github/workflows/prepare-release.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -53,7 +53,7 @@ jobs:
5353
- name: Setup Go
5454
uses: actions/setup-go@v4
5555
with:
56-
go-version: ~1.19.11
56+
go-version: ~1.19.12
5757
# Prepare Core for release.
5858
# - Update CHANGELOG.md file, this is done via chloggen
5959
# - Run make prepare-release PREVIOUS_VERSION=1.0.0 RELEASE_CANDIDATE=1.1.0 MODSET=stable

0 commit comments

Comments
 (0)