Skip to content

Commit

Permalink
build: bump to go 1.21.3 (#18717)
Browse files Browse the repository at this point in the history
Go 1.21.3 fixes an important HTTP2 CVE (see CVE-2023-39325 and
CVE-2023-44487). Nomad does not use HTTP2 and is not vulnerable. However we
should pick up the toolchain bump if for no other reason than we don't have to
answer questions about that.
  • Loading branch information
tgross committed Oct 10, 2023
1 parent ef68143 commit 635afee
Show file tree
Hide file tree
Showing 5 changed files with 7 additions and 4 deletions.
3 changes: 3 additions & 0 deletions .changelog/18717.txt
Original file line number Diff line number Diff line change
@@ -0,0 +1,3 @@
```release-note:security
build: Update to Go 1.21.3
```
2 changes: 1 addition & 1 deletion .go-version
Original file line number Diff line number Diff line change
@@ -1 +1 @@
1.21.0
1.21.3
2 changes: 1 addition & 1 deletion contributing/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,7 @@ A development environment is supplied via Vagrant to make getting started easier

Developing without Vagrant
---
1. Install [Go 1.21.0+](https://golang.org/) *(Note: `gcc-go` is not supported)*
1. Install [Go 1.21.3+](https://golang.org/) *(Note: `gcc-go` is not supported)*
1. Clone this repo
```sh
$ git clone https://github.com/hashicorp/nomad.git
Expand Down
2 changes: 1 addition & 1 deletion scripts/linux-priv-go.sh
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ case $(arch) in
esac

function install_go() {
local go_version="1.21.0"
local go_version="1.21.3"
local download="https://storage.googleapis.com/golang/go${go_version}.linux-${ARCH}.tar.gz"

if go version 2>&1 | grep -q "${go_version}"; then
Expand Down
2 changes: 1 addition & 1 deletion scripts/release/mac-remote-build
Original file line number Diff line number Diff line change
Expand Up @@ -56,7 +56,7 @@ REPO_PATH="${TMP_WORKSPACE}/gopath/src/github.com/hashicorp/nomad"
mkdir -p "${TMP_WORKSPACE}/tmp"
install_go() {
local go_version="1.21.0"
local go_version="1.21.3"
local download=
download="https://storage.googleapis.com/golang/go${go_version}.darwin-amd64.tar.gz"
Expand Down

0 comments on commit 635afee

Please sign in to comment.