search

danielqsj / kafka_exporter

Kafka exporter for Prometheus
Apache License 2.0
2.18k stars 610 forks source link

bump go version to 1.21 #405

Closed ThomasDangleterre closed 1 month ago

ThomasDangleterre commented 1 year ago

Bump go version to 1.21 to address CVEs : CVE-2023-29402 CVE-2023-29404 CVE-2023-29405 CVE-2023-39533 CVE-2023-29403 CVE-2023-29409 CVE-2023-29406

Ran tests locally. before: Vulnerabilities found for image danielqsj/kafka-exporter:latest: total - 7, critical - 3, high - 2, medium - 2, low - 0 after: Vulnerabilities found for image kafka-exporter:bump-go: total - 0, critical - 0, high - 0, medium - 0, low - 0

Calebjh commented 9 months ago

I think that the build actions may also need to be updated, not just the go.mod file. E.g. release.yml and other places in .github/

ThomasDangleterre commented 6 months ago

I think that the build actions may also need to be updated, not just the go.mod file. E.g. release.yml and other places in .github/

Nice catch, I updated them.

danielqsj commented 1 month ago

closed due to already upgraded to 1.23