govulncheck: Use patch release with security fixes #1637

Merged

fyrchik merged 1 commit from achuprov/frostfs-node:fix/vulncheck into master 2025-02-07 09:44:21 +00:00

Conversation 2 Commits 1 Files changed 1 +1 -1

achuprov commented 2025-02-06 18:19:53 +00:00

Member

Copy link

Signed-off-by: Alexander Chuprov a.chuprov@yadro.com

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>

achuprov added 1 commit 2025-02-06 18:19:53 +00:00

[#1637] govulncheck: Use patch release with security fixes ... 69c35b1d61

Signed-off-by: Alexander Chuprov <a.chuprov@yadro.com>

requested reviews from potyarkin, storage-core-committers, storage-core-developers 2025-02-06 18:19:54 +00:00

acid-ant approved these changes 2025-02-07 05:27:35 +00:00

potyarkin approved these changes 2025-02-07 07:14:29 +00:00

potyarkin left a comment

Member

Copy link

https://pkg.go.dev/vuln/GO-2025-3447

Timing sidechannel for P-256 on ppc64le

😿

https://pkg.go.dev/vuln/GO-2025-3447 > Timing sidechannel for P-256 on **ppc64le** 😿

fyrchik merged commit 69c35b1d61 into master 2025-02-07 09:44:21 +00:00

fyrchik referenced this pull request from a commit 2025-02-07 09:44:22 +00:00

[#1637] govulncheck: Use patch release with security fixes

a-savchuk commented 2025-02-07 15:10:44 +00:00

Member

Copy link

@potyarkin

Just wondering, is there any way to automatically choose the latest Go patch in actions, for example, >=1.23,<1.24 or ~1.23? If so, is there anything that stops us from using it?

@potyarkin Just wondering, is there any way to automatically choose the latest Go patch in actions, for example, `>=1.23,<1.24` or `~1.23`? If so, is there anything that stops us from using it?

👀 1

potyarkin commented 2025-02-10 15:58:50 +00:00

Member

Copy link

@a-savchuk, done in #1641 :-)

@a-savchuk, done in #1641 :-)

🎉 1

Sign in to join this conversation.

Reviewers

No reviewers

acid-ant

potyarkin

Labels

Clear labels   

P0

Highest

  

P1

High

  

P2

Medium

  

P3

Low

  

badger

Badger DB related issues

  

frostfs-adm

  

frostfs-cli

  

frostfs-ir

  

frostfs-lens

  

frostfs-node

  

good first issue

Good for newcomers

  

triage

  

Infrastructure

Infrastructure, Automation, CI/CD or DevOps related stuff

  

blocked

The issue or PR is blocked by something

  

bug

Something is not working

  

config

Configuration format update or breaking change

  

discussion

Talking about something in order to reach a decision or to exchange ideas

  

documentation

Documentation related

  

duplicate

This issue or pull request already exists

  

enhancement

New feature

  

go

Language features adoption

  

help wanted

Extra attention is needed

  

internal

  

invalid

Something is wrong

  

kludge

This is a kludge and we know it

  

observability

Related to metrics, tracing and logs

  

perfomance

Perfomance related

  

question

More information is needed

  

refactoring

Refactoring

  

wontfix

This won't be fixed

No labels

P0

P1

P2

P3

badger

frostfs-adm

frostfs-cli

frostfs-ir

frostfs-lens

frostfs-node

good first issue

triage

Infrastructure

blocked

bug

config

discussion

documentation

duplicate

enhancement

go

help wanted

internal

invalid

kludge

observability

perfomance

question

refactoring

wontfix

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

4 participants

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: TrueCloudLab/frostfs-node#1637

No description provided.