This pull request address both upgrading the 'golang.org/x/sys' dependency to resolve CVE-2022-29526 and updating the Dockerfiles to 1.19 to uphold the 'boringcrypto' fix as well as keeping everything up-to-date.
Implemented Changes
updated CHANGELOG
upgraded image in Dockerfile to 1.19
upgraded image in Dockerfile.helm-unit-test to 1.19
upgraded image in Dockerfile.junit to 1.19 & corresponding syntax fix
upgraded image in Dockerfile.test to 1.19
upgraded go.mod and go.sum
Changelog
[X] The CHANGELOG has been updated, or
[ ] This PR does not include user-facing changes and doesn't require a
CHANGELOG update
Test coverage
[ ] This PR includes new unit and integration tests to go with the code
changes, or
[X] The changes in this PR do not require tests
Documentation
[ ] Docs (e.g. READMEs) were updated in this PR
[ ] A follow-up issue to update official docs has been filed here: [insert issue ID]
[X] This PR does not require updating any documentation
Behavior
[ ] This PR changes product behavior and has been reviewed by a PO, or
[X] These changes are part of a larger initiative that will be reviewed later, or
[] No behavior was changed with this PR
Security
[ ] Security architect has reviewed the changes in this PR,
[X] These changes are part of a larger initiative with a separate security review, or
[ ] There are no security aspects to these changes
Desired Outcome
This pull request address both upgrading the 'golang.org/x/sys' dependency to resolve CVE-2022-29526 and updating the Dockerfiles to 1.19 to uphold the 'boringcrypto' fix as well as keeping everything up-to-date.
Implemented Changes
Changelog
Test coverage
Documentation
READMEs) were updated in this PRBehavior
Security