Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump Go and Dockerfile versions #338

Merged
merged 1 commit into from
Sep 12, 2023
Merged

Bump Go and Dockerfile versions #338

merged 1 commit into from
Sep 12, 2023

Conversation

macedogm
Copy link
Member

Forwardport of #337 and additionally update Go to 1.20.

  1. Move Dockerfile.dapper to use BCI Golang bci/golang:1.20.
  2. Move the main CLI image in package/Dockerfile to use BCI Base bci/bci-base:15.5.
  3. Move the main CLI image in package/Dockerfile to run as a non-root user.
  4. Bump Go to 1.19 in go.mod.
  5. Several bumps in go.mod to fix CVEs:
    1. github.com/rancher/wrangler
    2. golang.org/x/crypto
    3. golang.org/x/net
    4. golang.org/x/sys
    5. golang.org/x/term
    6. golang.org/x/text
    7. No other major dependency was bumped besides the ones listed.
  6. Bump rancher/dapper to v0.6.0 in .drone.yml.
  7. Run go fmt on config/config.go to fix a small formatting issue.

@macedogm
Bump Go and Dockerfile versions
b6f8e84 
Signed-off-by: Guilherme Macedo <guilherme@gmacedo.com>
@macedogm macedogm marked this pull request as ready for review September 12, 2023 19:56
@macedogm macedogm merged commit 5c2da64 into rancher:v2.8 Sep 12, 2023
1 check passed
@macedogm macedogm deleted the v2.8-security-improvements branch September 12, 2023 20:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@cmurphy cmurphy cmurphy approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@macedogm @cmurphy