search

ossf / scorecard

OpenSSF Scorecard - Security health metrics for Open Source
https://scorecard.dev
Apache License 2.0
4.62k stars 503 forks source link

:seedling: Require minimum version of Go 1.22.0 #4322

Closed spencerschrock closed 2 months ago

spencerschrock commented 2 months ago

What kind of change does this PR introduce?

go directive bump

What is the current behavior?

Go 1.21 is the minimum version required to compile Scorecard or use it as a library.

What is the new behavior (if this is a feature change)?**

Go 1.22.0 is now the minimum version.

At least one of our dependencies now requires 1.22. Additionally, with the Go 1.23 release, Go 1.21 is no longer supported. Due to the loopvar changes, I'm submitting this as a standalone change.

Which issue(s) this PR fixes

Unblocks #4319

Special notes for your reviewer

Note this is different from #3859 or #4300 which update our toolchain versions.

Does this PR introduce a user-facing change?

For user-facing changes, please add a concise, human-readable release note to the release-note

(In particular, describe what changes users might need to make in their application as a result of this pull request.)

Go 1.22.0 is now required to build Scorecard or use it as a library.
spencerschrock commented 2 months ago

We could always look at new Go 1.22 golangci-lint linters in the future too: