search

actions / setup-go

Set up your GitHub Actions workflow with a specific version of Go
MIT License
1.41k stars 531 forks source link

Please upgrade `go-actions` to 1.21.8 / 1.22.1 #462

Closed silverwind closed 8 months ago

silverwind commented 8 months ago

Description: go-versions dependency is out of date, leading to all repos that use setup-go in combination with govulncheck to fail on the newly published vulnerabilities present in go 1.21.7.

Action version: 5 Platform: all Runner type: all Tools version: go 1.21 and 1.22

Repro steps: 

steps:
  - uses: actions/setup-go@v5
  with:
    go-version-file: "~1.21"
    check-latest: true

Expected behavior:

Setup go version spec 1.21
Attempting to resolve the latest version from the manifest...
matching 1.21...
Resolved as '1.21.8'

Actual behavior:

Setup go version spec 1.21
Attempting to resolve the latest version from the manifest...
matching 1.21...
Resolved as '1.21.7'
jonathan-innis commented 8 months ago

+1 we are hitting this issue as well in kubernetes-sigs/karpenter and aws/karpenter-provider-aws

jonathan-innis commented 8 months ago

Looks like this literally just got merged: https://github.com/actions/go-versions/pull/97

silverwind commented 8 months ago

Yes, working again.