Update to Go 1.21.4 to fix GO-2023-2185 (#66)

* Update to Go 1.21.4 to fix GO-2023-2185 https://pkg.go.dev/vuln/GO-2023-2185 * Updated CHANGELOG.md
applejag · Nov 11, 2023 · 2bf2f93 · 2bf2f93
1 parent 972c32b
commit 2bf2f93
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 1 deletion.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -24,6 +24,9 @@ This project tries to follow [SemVer 2.0.0](https://semver.org/).
   The fix is just adding a small 150ms sleep, which is hopefully enough time
   for tools like `kubectx` to finish writing the kubeconfig file. (#63)
 
+- Changed to Go 1.21.4 to resolve vulnerability [GO-2023-2186](https://pkg.go.dev/vuln/GO-2023-2186),
+  where `filepath.IsLocal` incorrectly treated reserved names as local. (#66)
+
 ## v0.5.0 (2023-11-04)
 
 - BREAKING: Changed binary name from `klock` to `kubectl-klock`.

diff --git a/go.mod b/go.mod
@@ -4,7 +4,7 @@
 
 module github.com/applejag/kubectl-klock
 
-go 1.21
+go 1.21.4
 
 require (
 	github.com/charmbracelet/bubbles v0.16.1