Skip to content

Fix/go 1 24 13 cves#23

Merged
teaguru merged 3 commits intomasterfrom
fix/go-1-24-13-cves
May 5, 2026
Merged

Fix/go 1 24 13 cves#23
teaguru merged 3 commits intomasterfrom
fix/go-1-24-13-cves

Conversation

@teaguru
Copy link
Copy Markdown
Contributor

@teaguru teaguru commented May 5, 2026

No description provided.

teaguru added 3 commits May 5, 2026 11:27
Use Go 1.24.13 as the local toolchain floor while keeping CI and Docker on floating Go 1.24 patch releases for future CVE updates.

Also update aws-sdk-go to v1.55.8 and tidy module metadata.
Update actions/checkout v2 -> v4, actions/setup-go v1 -> v5, and
goreleaser/goreleaser-action v1 -> v6 in the release workflow. Old
versions used the deprecated Node 12 runtime.
…langci aws-sdk-go SA1019 exclusion

- release.yml build_and_release job missed contents:write, blocking
  goreleaser from creating the GitHub Release (403 from API).
- .goreleaser.yml needs explicit version: 2 to silence warning and
  stay parseable by future goreleaser majors.
- .golangci.yml excludes SA1019 deprecation warnings for aws-sdk-go
  imports in ssm/parameters.go; SDK v1 is in maintenance mode but
  still receiving security patches, full v2 migration is a separate
  task.
@teaguru teaguru merged commit 0a86596 into master May 5, 2026
5 checks passed
@teaguru teaguru deleted the fix/go-1-24-13-cves branch May 5, 2026 00:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant