From 9baab574677d41bcaef24092127a5768238eaceb Mon Sep 17 00:00:00 2001 From: Adriel Perkins Date: Wed, 8 Nov 2023 23:54:32 -0500 Subject: [PATCH] [chore] bump go versions in workflows to 1.20.11 and 1.21.4 This fixes security vulnerabilities found via govulncheck when running against the previous patch versions of golang. These vulnerabilities were fixes in the latest patches. --- .github/workflows/build-and-test-windows.yml | 2 +- .github/workflows/build-and-test.yml | 18 +++++++++--------- .github/workflows/changelog.yml | 2 +- .github/workflows/codeql-analysis.yml | 2 +- .github/workflows/create-dependabot-pr.yml | 2 +- .github/workflows/e2e-tests.yml | 4 ++-- .github/workflows/load-tests.yml | 4 ++-- .github/workflows/prepare-release.yml | 2 +- .../workflows/prometheus-compliance-tests.yml | 2 +- .github/workflows/tidy-dependencies.yml | 2 +- 10 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/build-and-test-windows.yml b/.github/workflows/build-and-test-windows.yml index eb2851e1111a..2f7548ae0b6a 100644 --- a/.github/workflows/build-and-test-windows.yml +++ b/.github/workflows/build-and-test-windows.yml @@ -44,7 +44,7 @@ jobs: run: Install-WindowsFeature -name Web-Server -IncludeManagementTools - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-mod-cache diff --git a/.github/workflows/build-and-test.yml b/.github/workflows/build-and-test.yml index e22ea9a161ea..19c6cfd2db98 100644 --- a/.github/workflows/build-and-test.yml +++ b/.github/workflows/build-and-test.yml @@ -25,7 +25,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache @@ -141,7 +141,7 @@ jobs: - name: Setup Go uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache @@ -164,7 +164,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache @@ -224,7 +224,7 @@ jobs: unittest-matrix: strategy: matrix: - go-version: ["~1.21.3", "~1.20.10"] # 1.20 is interpreted as 1.2 without quotes + go-version: ["~1.21.4", "~1.20.11"] # 1.20 is interpreted as 1.2 without quotes group: - receiver-0 - receiver-1 @@ -316,7 +316,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache @@ -337,7 +337,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache @@ -363,7 +363,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache @@ -432,7 +432,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache @@ -566,7 +566,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Mkdir bin and dist run: | diff --git a/.github/workflows/changelog.yml b/.github/workflows/changelog.yml index 44afcfe82c64..158b5f80d171 100644 --- a/.github/workflows/changelog.yml +++ b/.github/workflows/changelog.yml @@ -33,7 +33,7 @@ jobs: fetch-depth: 0 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index beeb39980908..73a1f2e38589 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -17,7 +17,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false # Initializes the CodeQL tools for scanning. diff --git a/.github/workflows/create-dependabot-pr.yml b/.github/workflows/create-dependabot-pr.yml index 4944b13c9bbb..8654e6fecc09 100644 --- a/.github/workflows/create-dependabot-pr.yml +++ b/.github/workflows/create-dependabot-pr.yml @@ -12,7 +12,7 @@ jobs: run: sudo apt-get update; sudo apt-get install zsh - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Run dependabot-pr.sh run: ./.github/workflows/scripts/dependabot-pr.sh diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml index ee1844f3cce6..f560983c592a 100644 --- a/.github/workflows/e2e-tests.yml +++ b/.github/workflows/e2e-tests.yml @@ -19,7 +19,7 @@ jobs: uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache @@ -56,7 +56,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache diff --git a/.github/workflows/load-tests.yml b/.github/workflows/load-tests.yml index 9606a3dfd2c2..c9f3fbdf7dee 100644 --- a/.github/workflows/load-tests.yml +++ b/.github/workflows/load-tests.yml @@ -26,7 +26,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache @@ -64,7 +64,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache diff --git a/.github/workflows/prepare-release.yml b/.github/workflows/prepare-release.yml index 973a82e0061d..6fcfd25eb8d3 100644 --- a/.github/workflows/prepare-release.yml +++ b/.github/workflows/prepare-release.yml @@ -26,7 +26,7 @@ jobs: path: opentelemetry-collector-contrib - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Prepare release for contrib working-directory: opentelemetry-collector-contrib diff --git a/.github/workflows/prometheus-compliance-tests.yml b/.github/workflows/prometheus-compliance-tests.yml index fefb24da8d6f..f0bdfabe3feb 100644 --- a/.github/workflows/prometheus-compliance-tests.yml +++ b/.github/workflows/prometheus-compliance-tests.yml @@ -26,7 +26,7 @@ jobs: path: opentelemetry-collector-contrib - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache diff --git a/.github/workflows/tidy-dependencies.yml b/.github/workflows/tidy-dependencies.yml index 92c5fd08a1b8..04c874d40fd8 100644 --- a/.github/workflows/tidy-dependencies.yml +++ b/.github/workflows/tidy-dependencies.yml @@ -26,7 +26,7 @@ jobs: token: ${{ secrets.OPENTELEMETRYBOT_GITHUB_TOKEN }} - uses: actions/setup-go@v4 with: - go-version: ~1.20.10 + go-version: ~1.20.11 cache: false - name: Cache Go id: go-cache