go 1.17.8

[jidicula]

Created with brew bump-formula-pr.

resource blocks may require updates.

[jidicula]

regexp: stack exhaustion compiling deeply nested expressions

On 64-bit platforms, an extremely deeply nested expression can cause regexp.Compile to cause goroutine stack exhaustion, forcing the program to exit. Note this applies to very large expressions, on the order of 2MB.

Thanks to Juho Nurminen of Mattermost for reporting this.

This is CVE-2022-24921 and golang/go#51112.

[Bo98]

I'm happy to run this without CI-build-dependents-from-source unless someone has strong opinions otherwise. The original intention I had for adding that feature to test-bot was for source/build-incompatible updates (1.x -> 1.y), which this isn't and I've been wanting to implement smarter version management for a while now.

[stefanb]

Should be easy, since

• go 1.17.7 #94895

was done very recently, so likely no or only a few other formulas broke in the mean time.

[BrewTestBot]

🤖 A scheduled task has triggered a merge.

[carlocab]

I'm happy to run this without CI-build-dependents-from-source unless someone has strong opinions otherwise. The original intention I had for adding that feature to test-bot was for source/build-incompatible updates (1.x -> 1.y), which this isn't and I've been wanting to implement smarter version management for a while now.

I've been thinking the same thing about building dependents from source for go too -- it probably shouldn't be done for patch releases.