Skip to content

Conversation

@michaelvp411
Copy link
Contributor

Update Go version from 1.24.2 to 1.24.6 to resolve vulnerability reports in transitive dependencies. This update addresses security issues in SQL and Git packages that, while not directly used by the provider, are causing artifact repository blocks.

Changes Made

  • Updated Go version from 1.24.2 to 1.24.6 in go.mod
  • Updated Go version in all GitHub Actions workflow jobs in .github/workflows/test.yml
  • Ran go mod tidy to update dependencies

Impact

  • Risk: Minimal - this is a patch release update that typically includes only bug fixes and security updates
  • Benefit: Clears vulnerability reports in artifact repositories, allowing customers to download the provider without security policy violations
  • Testing: Existing CI tests will verify compatibility

Fixes #452

@github-actions
Copy link

github-actions bot commented Oct 29, 2025

All contributors have signed the CLA ✍️ ✅
Posted by the CLA Assistant Lite bot.

@michaelvp411 michaelvp411 force-pushed the chore/update-go-1-24-6 branch from 3d960b3 to 0839404 Compare October 29, 2025 16:24
@johnstcn
Copy link
Member

Hey @michaelvp411, can you rebase on main? I just merged a fix for an unrelated issue that was causing one of the tests to fail here.

Update Go version from 1.24.2 to 1.24.6 to resolve vulnerability reports in transitive dependencies. This update addresses security issues in SQL and Git packages that, while not directly used by the provider, are causing artifact repository blocks.

Fixes #452
Update Go version in release.yml to match go.mod version (1.24.6)
@michaelvp411 michaelvp411 force-pushed the chore/update-go-1-24-6 branch from a1aa018 to 9d76ec6 Compare October 30, 2025 13:47
@michaelvp411 michaelvp411 requested a review from johnstcn October 30, 2025 13:51
@michaelvp411
Copy link
Contributor Author

@johnstcn All tests passing

@johnstcn johnstcn merged commit a86ce82 into main Oct 30, 2025
6 checks passed
@johnstcn johnstcn deleted the chore/update-go-1-24-6 branch October 30, 2025 14:43
@github-actions github-actions bot locked and limited conversation to collaborators Oct 30, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Update Go to 1.24.6 to resolve vulnerability reports

2 participants