Skip to content

Commit 5df11c7

Browse files
MovieStoreGuyzeck-ops
authored andcommitted
[chore]: Upgrading go version to v1.21.11 (open-telemetry#37534)
#### Description Vulnerability open-telemetry#1: GO-2025-3420 Sensitive headers incorrectly sent after cross-domain redirect in net/http More info: https://pkg.go.dev/vuln/GO-2025-3420 Standard library Found in: net/[email protected] Fixed in: net/[email protected] Example traces found: Error: open-telemetry#1: codeowners.go:212:55: githubgen.codeownersGenerator.getGithubMembers calls github.OrganizationsService.ListMembers, which eventually calls http.Client.Do Vulnerability open-telemetry#2: GO-[20](https://github.com/open-telemetry/opentelemetry-collector-contrib/actions/runs/13003223509/job/36265594395?pr=37492#step:6:21)25-3373 Usage of IPv6 zone IDs can bypass URI name constraints in crypto/x509 More info: https://pkg.go.dev/vuln/GO-2025-3373 Standard library Found in: crypto/x509@go1.[22](https://github.com/open-telemetry/opentelemetry-collector-contrib/actions/runs/13003223509/job/36265594395?pr=37492#step:6:23).8 Fixed in: crypto/[email protected] Example traces found: Related: open-telemetry/opentelemetry-collector#12197
1 parent 69ad029 commit 5df11c7

15 files changed

+31
-31
lines changed

.github/workflows/build-and-test-arm.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -50,7 +50,7 @@ jobs:
5050
- uses: actions/checkout@v4
5151
- uses: actions/setup-go@v5
5252
with:
53-
go-version: "~1.22.5"
53+
go-version: "~1.22.11"
5454
cache: false
5555
- name: Cache Go
5656
id: go-cache

.github/workflows/build-and-test-darwin.yaml

+2-2
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
- uses: actions/checkout@v4
3030
- uses: actions/setup-go@v5
3131
with:
32-
go-version: "~1.22.5"
32+
go-version: "~1.22.11"
3333
cache: false
3434
- name: Cache Go
3535
id: go-cache
@@ -70,7 +70,7 @@ jobs:
7070
- uses: actions/checkout@v4
7171
- uses: actions/setup-go@v5
7272
with:
73-
go-version: "~1.22.5"
73+
go-version: "~1.22.11"
7474
cache: false
7575
- name: Install Tools
7676
if: steps.go-cache.outputs.cache-hit != 'true'

.github/workflows/build-and-test-windows.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -59,7 +59,7 @@ jobs:
5959
run: Install-WindowsFeature -name Web-Server -IncludeManagementTools
6060
- uses: actions/setup-go@v5
6161
with:
62-
go-version: "1.22.8"
62+
go-version: "1.22.11"
6363
cache: false
6464
- name: Cache Go
6565
id: go-mod-cache

.github/workflows/build-and-test.yml

+10-10
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
- uses: actions/checkout@v4
2727
- uses: actions/setup-go@v5
2828
with:
29-
go-version: "1.22.8"
29+
go-version: "1.22.11"
3030
cache: false
3131
- name: Cache Go
3232
id: go-cache
@@ -94,7 +94,7 @@ jobs:
9494
- uses: actions/checkout@v4
9595
- uses: actions/setup-go@v5
9696
with:
97-
go-version: "1.22.8"
97+
go-version: "1.22.11"
9898
cache: false
9999
- name: Cache Go
100100
id: go-cache
@@ -164,7 +164,7 @@ jobs:
164164
- name: Setup Go
165165
uses: actions/setup-go@v5
166166
with:
167-
go-version: "1.22.8"
167+
go-version: "1.22.11"
168168
cache: false
169169
- name: Cache Go
170170
id: go-cache
@@ -188,7 +188,7 @@ jobs:
188188
- uses: actions/checkout@v4
189189
- uses: actions/setup-go@v5
190190
with:
191-
go-version: "1.22.8"
191+
go-version: "1.22.11"
192192
cache: false
193193
- name: Cache Go
194194
id: go-cache
@@ -246,7 +246,7 @@ jobs:
246246
strategy:
247247
fail-fast: false
248248
matrix:
249-
go-version: ["1.23.0", "1.22.8"] # 1.20 is interpreted as 1.2 without quotes
249+
go-version: ["1.23.0", "1.22.11"] # 1.20 is interpreted as 1.2 without quotes
250250
runner: [ubuntu-24.04]
251251
group:
252252
- receiver-0
@@ -363,7 +363,7 @@ jobs:
363363
- uses: actions/checkout@v4
364364
- uses: actions/setup-go@v5
365365
with:
366-
go-version: "1.22.8"
366+
go-version: "1.22.11"
367367
cache: false
368368
- name: Cache Go
369369
id: go-cache
@@ -402,7 +402,7 @@ jobs:
402402
- uses: actions/checkout@v4
403403
- uses: actions/setup-go@v5
404404
with:
405-
go-version: "1.22.8"
405+
go-version: "1.22.11"
406406
cache: false
407407
- name: Cache Go
408408
id: go-cache
@@ -429,7 +429,7 @@ jobs:
429429
- uses: actions/checkout@v4
430430
- uses: actions/setup-go@v5
431431
with:
432-
go-version: "1.22.8"
432+
go-version: "1.22.11"
433433
cache: false
434434
- name: Cache Go
435435
id: go-cache
@@ -501,7 +501,7 @@ jobs:
501501
- uses: actions/checkout@v4
502502
- uses: actions/setup-go@v5
503503
with:
504-
go-version: "1.22.8"
504+
go-version: "1.22.11"
505505
cache: false
506506
- name: Cache Go
507507
id: go-cache
@@ -551,7 +551,7 @@ jobs:
551551
- uses: actions/checkout@v4
552552
- uses: actions/setup-go@v5
553553
with:
554-
go-version: "1.22.8"
554+
go-version: "1.22.11"
555555
cache: false
556556
- name: Mkdir bin and dist
557557
run: |

.github/workflows/changelog.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
fetch-depth: 0
3636
- uses: actions/setup-go@v5
3737
with:
38-
go-version: "1.22.8"
38+
go-version: "1.22.11"
3939
cache: false
4040
- name: Cache Go
4141
id: go-cache

.github/workflows/check-codeowners.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030

3131
- uses: actions/setup-go@v5
3232
with:
33-
go-version: "1.22.8"
33+
go-version: "1.22.11"
3434
cache: false
3535

3636
- name: Cache Go Tools

.github/workflows/codeql-analysis.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -24,7 +24,7 @@ jobs:
2424
- uses: actions/checkout@v4
2525
- uses: actions/setup-go@v5
2626
with:
27-
go-version: "1.22.8"
27+
go-version: "1.22.11"
2828
cache: false
2929

3030
# Initializes the CodeQL tools for scanning.

.github/workflows/e2e-tests-windows.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,7 @@ jobs:
118118
- name: Setup Go
119119
uses: actions/setup-go@v5
120120
with:
121-
go-version: ~1.22.8
121+
go-version: ~1.22.11
122122
cache: false
123123
- name: Cache Go
124124
uses: actions/cache@v4

.github/workflows/e2e-tests.yml

+4-4
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
uses: actions/checkout@v4
2727
- uses: actions/setup-go@v5
2828
with:
29-
go-version: "1.22.8"
29+
go-version: "1.22.11"
3030
cache: false
3131
- name: Cache Go
3232
id: go-cache
@@ -57,7 +57,7 @@ jobs:
5757
- uses: actions/checkout@v4
5858
- uses: actions/setup-go@v5
5959
with:
60-
go-version: "1.22.8"
60+
go-version: "1.22.11"
6161
cache: false
6262
- name: Cache Go
6363
id: go-cache
@@ -89,7 +89,7 @@ jobs:
8989
uses: actions/checkout@v4
9090
- uses: actions/setup-go@v5
9191
with:
92-
go-version: "1.22.8"
92+
go-version: "1.22.11"
9393
cache: false
9494
- name: Cache Go
9595
id: go-cache
@@ -137,7 +137,7 @@ jobs:
137137
- uses: actions/checkout@v4
138138
- uses: actions/setup-go@v5
139139
with:
140-
go-version: "1.22.8"
140+
go-version: "1.22.11"
141141
cache: false
142142
- name: Cache Go
143143
id: go-cache

.github/workflows/load-tests.yml

+2-2
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
- uses: actions/checkout@v4
2929
- uses: actions/setup-go@v5
3030
with:
31-
go-version: "1.22.8"
31+
go-version: "1.22.11"
3232
cache: false
3333
- name: Cache Go
3434
id: go-cache
@@ -67,7 +67,7 @@ jobs:
6767
- uses: actions/checkout@v4
6868
- uses: actions/setup-go@v5
6969
with:
70-
go-version: "1.22.8"
70+
go-version: "1.22.11"
7171
cache: false
7272
- name: Cache Go
7373
id: go-cache

.github/workflows/prepare-release.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ jobs:
2626
path: opentelemetry-collector-contrib
2727
- uses: actions/setup-go@v5
2828
with:
29-
go-version: "1.22.8"
29+
go-version: "1.22.11"
3030
cache: false
3131
- name: Prepare release for contrib
3232
working-directory: opentelemetry-collector-contrib

.github/workflows/prometheus-compliance-tests.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
path: opentelemetry-collector-contrib
3232
- uses: actions/setup-go@v5
3333
with:
34-
go-version: "1.22.8"
34+
go-version: "1.22.11"
3535
cache: false
3636
- name: Cache Go
3737
id: go-cache

.github/workflows/scoped-test.yaml

+1-1
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
- uses: actions/checkout@v4
4747
- uses: actions/setup-go@v5
4848
with:
49-
go-version: "1.22.8"
49+
go-version: "1.22.11"
5050
cache: false
5151

5252
- name: Try to restore go-cache

.github/workflows/telemetrygen.yml

+3-3
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
- uses: actions/checkout@v4
2929
- uses: actions/setup-go@v5
3030
with:
31-
go-version: "1.22.8"
31+
go-version: "1.22.11"
3232
cache: false
3333
- name: Cache Go
3434
id: go-cache
@@ -67,7 +67,7 @@ jobs:
6767
- uses: actions/checkout@v4
6868
- uses: actions/setup-go@v5
6969
with:
70-
go-version: "1.22.8"
70+
go-version: "1.22.11"
7171
cache: false
7272
- name: Cache Go
7373
id: go-cache
@@ -112,7 +112,7 @@ jobs:
112112
- uses: actions/checkout@v4
113113
- uses: actions/setup-go@v5
114114
with:
115-
go-version: "1.22.8"
115+
go-version: "1.22.11"
116116
cache: false
117117
- name: Cache Go
118118
id: go-cache

.github/workflows/tidy-dependencies.yml

+1-1
Original file line numberDiff line numberDiff line change
@@ -21,7 +21,7 @@ jobs:
2121
ref: ${{ github.head_ref }}
2222
- uses: actions/setup-go@v5
2323
with:
24-
go-version: "1.22.8"
24+
go-version: "1.22.11"
2525
cache: false
2626
- name: Cache Go
2727
id: go-cache

0 commit comments

Comments
 (0)