1berry/docker-cli
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

update to go1.23.7

Browse Source 
- https://github.com/golang/go/issues?q=milestone%3AGo1.23.7+label%3ACherryPickApproved
- full diff: https://github.com/golang/go/compare/go1.23.6...go1.23.7

These minor releases include 1 security fixes following the security policy:

net/http, x/net/proxy, x/net/http/httpproxy: proxy bypass using IPv6 zone IDs

Matching of hosts against proxy patterns could improperly treat an IPv6
zone ID as a hostname component. For example, when the NO_PROXY
environment variable was set to "*.example.com", a request to
"[::1%25.example.com]:80` would incorrectly match and not be proxied.

Thanks to Juho Forsén of Mattermost for reporting this issue.

This is CVE-2025-22870 and Go issue https://go.dev/issue/71984.

View the release notes for more information:
https://go.dev/doc/devel/release#go1.23.7

Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
This commit is contained in:
Paweł Gronowski 2025-03-04 22:59:28 +01:00
parent ea1f10b440
commit df209212cf
No known key found for this signature in database
GPG Key ID: B85EFCFE26DEF92A
9 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/codeql.yml vendored
View File

@ -63,7 +63,7 @@ jobs:
name: Update Go name: Update Go
uses: actions/setup-go@v5 uses: actions/setup-go@v5
with: with:
go-version: "1.23.6" go-version: "1.23.7"
- -
name: Initialize CodeQL name: Initialize CodeQL
uses: github/codeql-action/init@v3 uses: github/codeql-action/init@v3

2
.github/workflows/test.yml vendored
View File

@ -66,7 +66,7 @@ jobs:
name: Set up Go name: Set up Go
uses: actions/setup-go@v5 uses: actions/setup-go@v5
with: with:
go-version: "1.23.6" go-version: "1.23.7"
- -
name: Test name: Test
run: | run: |

2
.golangci.yml
View File

@ -44,7 +44,7 @@ run:
# which causes it to fallback to go1.17 semantics. # which causes it to fallback to go1.17 semantics.
# #
# TODO(thaJeztah): update "usetesting" settings to enable go1.24 features once our minimum version is go1.24 # TODO(thaJeztah): update "usetesting" settings to enable go1.24 features once our minimum version is go1.24
go: "1.23.6" go: "1.23.7"
timeout: 5m timeout: 5m
linters-settings: linters-settings:

2
Dockerfile
View File

@ -4,7 +4,7 @@ ARG BASE_VARIANT=alpine
ARG ALPINE_VERSION=3.21 ARG ALPINE_VERSION=3.21
ARG BASE_DEBIAN_DISTRO=bookworm ARG BASE_DEBIAN_DISTRO=bookworm
ARG GO_VERSION=1.23.6 ARG GO_VERSION=1.23.7
ARG XX_VERSION=1.6.1 ARG XX_VERSION=1.6.1
ARG GOVERSIONINFO_VERSION=v1.4.1 ARG GOVERSIONINFO_VERSION=v1.4.1
ARG GOTESTSUM_VERSION=v1.12.0 ARG GOTESTSUM_VERSION=v1.12.0

2
docker-bake.hcl
View File

@ -1,5 +1,5 @@
variable "GO_VERSION" { variable "GO_VERSION" {
default = "1.23.6" default = "1.23.7"
} }
variable "VERSION" { variable "VERSION" {
default = "" default = ""

2
dockerfiles/Dockerfile.dev
View File

@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1 # syntax=docker/dockerfile:1
ARG GO_VERSION=1.23.6 ARG GO_VERSION=1.23.7
ARG ALPINE_VERSION=3.21 ARG ALPINE_VERSION=3.21
# BUILDX_VERSION sets the version of buildx to install in the dev container. # BUILDX_VERSION sets the version of buildx to install in the dev container.

2
dockerfiles/Dockerfile.lint
View File

@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1 # syntax=docker/dockerfile:1
ARG GO_VERSION=1.23.6 ARG GO_VERSION=1.23.7
ARG ALPINE_VERSION=3.21 ARG ALPINE_VERSION=3.21
ARG GOLANGCI_LINT_VERSION=v1.64.5 ARG GOLANGCI_LINT_VERSION=v1.64.5

2
dockerfiles/Dockerfile.vendor
View File

@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1 # syntax=docker/dockerfile:1
ARG GO_VERSION=1.23.6 ARG GO_VERSION=1.23.7
ARG ALPINE_VERSION=3.21 ARG ALPINE_VERSION=3.21
ARG MODOUTDATED_VERSION=v0.8.0 ARG MODOUTDATED_VERSION=v0.8.0

2
e2e/testdata/Dockerfile.gencerts vendored
View File

@ -1,6 +1,6 @@
# syntax=docker/dockerfile:1 # syntax=docker/dockerfile:1
ARG GO_VERSION=1.23.6 ARG GO_VERSION=1.23.7
FROM golang:${GO_VERSION}-alpine AS generated FROM golang:${GO_VERSION}-alpine AS generated
ENV GOTOOLCHAIN=local ENV GOTOOLCHAIN=local