Update project to go 1.23#1427
Conversation
Signed-off-by: David Kwon <dakwon@redhat.com>
![github-advanced-security[bot]](https://avatars.githubusercontent.com/in/57789?s=60&v=4){kind=small}
| # | ||
|
|
||
| FROM registry.ci.openshift.org/openshift/release:golang-1.22 | ||
| FROM registry.ci.openshift.org/openshift/release:golang-1.23 |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
|
|
||
| # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset | ||
| FROM registry.access.redhat.com/ubi9/go-toolset:9.5-1739267472 as builder | ||
| FROM registry.access.redhat.com/ubi9/go-toolset:1.23.6-1745328278 as builder |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
| # Build the manager binary | ||
| # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset | ||
| FROM registry.access.redhat.com/ubi9/go-toolset:9.5-1739267472 as builder | ||
| FROM registry.access.redhat.com/ubi9/go-toolset:1.23.6-1745328278 as builder |
Check warning
Code scanning / Scorecard
Pinned-Dependencies Medium
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: akurinnoy, dkwon17, ibuziuk, rohanKanojia The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
@dkwon17 lgtm, but looks like there is a conflict in the Dockerfile |
|
New changes are detected. LGTM label has been removed. |
6 participants
What does this PR do?
Updates project to use go 1.23
What issues does this PR fix or reference?
Update to go 1.23 is needed to fix CVEs:
cve-2025-22869 which has a CVSS score of 7.5.
cve-2025-22872 which has a CVSS score of 6.5.
Is it tested? How?
PR Checklist
/test v8-devworkspace-operator-e2e, v8-che-happy-pathto trigger)v8-devworkspace-operator-e2e: DevWorkspace e2e testv8-che-happy-path: Happy path for verification integration with Che