From eb24bc4facdfc6e6e28f7f4efbe578faeae1e915 Mon Sep 17 00:00:00 2001 From: Benoit Tigeot Date: Thu, 24 Apr 2025 10:47:08 +0200 Subject: [PATCH] Bump required Go version to 1.24.2 to avoid CVE-2025-22871 It has been reported that stlib is having a CVE b Bump inspired by https://github.com/helm/helm/commit/b1000ba5d76c6c8e7813235647767a49b4552255 and following [go directive](https://go.dev/ref/mod#go-mod-file-go). Close https://github.com/helm/helm/issues/30792 Signed-off-by: Benoit Tigeot --- .github/env | 2 +- go.mod | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/env b/.github/env index da6212635..9919e78ee 100644 --- a/.github/env +++ b/.github/env @@ -1,2 +1,2 @@ -GOLANG_VERSION=1.24 +GOLANG_VERSION=1.24.2 GOLANGCI_LINT_VERSION=v1.64 diff --git a/go.mod b/go.mod index 5c9e61ac3..354193bcb 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module helm.sh/helm/v3 -go 1.24 +go 1.24.2 require ( github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24