From b9aad9c0bb9ee4998c7e2ebd00d5e0b952ec2f57 Mon Sep 17 00:00:00 2001 From: sraybee Date: Wed, 29 Apr 2026 13:04:17 +0530 Subject: [PATCH 1/2] CBP-41144: Upgrade Go stdlib to 1.26.2 to mitigate CVE-2026-27143 --- .cloudbees/workflows/workflow.yml | 2 +- Dockerfile | 2 +- go.mod | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.cloudbees/workflows/workflow.yml b/.cloudbees/workflows/workflow.yml index d8cbc28..42f20bb 100644 --- a/.cloudbees/workflows/workflow.yml +++ b/.cloudbees/workflows/workflow.yml @@ -18,7 +18,7 @@ jobs: uses: https://github.com/cloudbees-io/checkout@v1 - name: Self Test - uses: docker://golang:1.26.1 + uses: docker://golang:1.26.2 run: | make verify diff --git a/Dockerfile b/Dockerfile index 9d3c143..8de1cd0 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,7 @@ FROM alpine:3.23 AS certs RUN apk add -U --no-cache ca-certificates -FROM golang:1.26.1-alpine3.23 AS build +FROM golang:1.26.2-alpine3.23 AS build WORKDIR /work COPY go.mod* go.sum* ./ RUN go mod download diff --git a/go.mod b/go.mod index 84bec0d..577e9e1 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/cloudbees-io/configure-aws-credentials -go 1.25.5 +go 1.26.2 require ( github.com/aws/aws-sdk-go-v2/config v1.29.17 From 4b6f8288337985dee64f7d1414163c202be1029f Mon Sep 17 00:00:00 2001 From: sraybee Date: Wed, 29 Apr 2026 13:39:04 +0530 Subject: [PATCH 2/2] Empty commit to retrigger CI