This is an automated email from the ASF dual-hosted git repository.
lostluck pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/beam.git
The following commit(s) were added to refs/heads/master by this push:
new ac17ed2df25 use go 1.21.1 for build (#28441)
ac17ed2df25 is described below
commit ac17ed2df25b3aa18488d6e5bccd233fa8d035b6
Author: liferoad <[email protected]>
AuthorDate: Wed Sep 13 23:42:24 2023 -0400
use go 1.21.1 for build (#28441)
* use go 1.21.1 for build
* update md
---
CHANGES.md | 1 +
buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy | 2 +-
2 files changed, 2 insertions(+), 1 deletion(-)
diff --git a/CHANGES.md b/CHANGES.md
index fb1a14fb128..40a9a1dc949 100644
--- a/CHANGES.md
+++ b/CHANGES.md
@@ -84,6 +84,7 @@
## Security Fixes
* Python containers updated, fixing
[CVE-2021-30474](https://nvd.nist.gov/vuln/detail/CVE-2021-30474),
[CVE-2021-30475](https://nvd.nist.gov/vuln/detail/CVE-2021-30475),
[CVE-2021-30473](https://nvd.nist.gov/vuln/detail/CVE-2021-30473),
[CVE-2020-36133](https://nvd.nist.gov/vuln/detail/CVE-2020-36133),
[CVE-2020-36131](https://nvd.nist.gov/vuln/detail/CVE-2020-36131),
[CVE-2020-36130](https://nvd.nist.gov/vuln/detail/CVE-2020-36130), and
[CVE-2020-36135](https://nvd.nist.gov/vuln/detail/ [...]
+* Used go 1.21.1 to build, fixing
[CVE-2023-39320](https://security-tracker.debian.org/tracker/CVE-2023-39320)
## Known Issues
diff --git
a/buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy
b/buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy
index 758cec917f6..a3c5bcf226f 100644
--- a/buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy
+++ b/buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy
@@ -2162,7 +2162,7 @@ class BeamModulePlugin implements Plugin<Project> {
def goRootDir = "${project.rootDir}/sdks/go"
// This sets the whole project Go version.
- project.ext.goVersion = "go1.21.0"
+ project.ext.goVersion = "go1.21.1"
// Minor TODO: Figure out if we can pull out the GOCMD env variable
after goPrepare script
// completion, and avoid this GOBIN substitution.
