Bump Go version to 1.21.9 to address HTTP CONTINUE vuln

go-spatial · Apr 8, 2024 · 9d4493b · 9d4493b
1 parent 226cc58
commit 9d4493b
Show file tree

Hide file tree

Showing 4 changed files with 5 additions and 1 deletion.
diff --git a/.github/actions/tegola-setup-env/action.yml b/.github/actions/tegola-setup-env/action.yml
@@ -32,6 +32,7 @@ runs:
       uses: actions/setup-go@v5
       with:
         go-version-file: 'go.mod'
+        check-latest: true
       if: ${{ inputs.go == 'true' }}
 
     - name: Set tegola version

diff --git a/.github/workflows/on_pr_push.yml b/.github/workflows/on_pr_push.yml
@@ -36,6 +36,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version-file: 'go.mod'
+          check-latest: true
 
       - name: Env Debug
         run: |
@@ -118,6 +119,7 @@ jobs:
       uses: actions/setup-go@v5
       with:
         go-version-file: 'go.mod'
+        check-latest: true
 
     - name: Install and run go vulncheck
       run: |

diff --git a/.github/workflows/on_release_publish.yml b/.github/workflows/on_release_publish.yml
@@ -57,6 +57,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version-file: 'go.mod'
+          check-latest: true
 
       - name: Build embedded UI
         run: |

diff --git a/Dockerfile b/Dockerfile
@@ -27,7 +27,7 @@
 #  $ docker run -v /path/to/docker-config:/opt/tegola_config -p 8080 tegola serve
 
 # Intermediary container for building
-FROM golang:1.21.8-alpine3.18 AS build
+FROM golang:1.21.9-alpine3.18 AS build
 
 ARG BUILDPKG="github.com/go-spatial/tegola/internal/build"
 ARG VER="Version Not Set"