schizophrenicmaniac opened a new pull request, #41187:
URL: https://github.com/apache/beam/pull/41187
Bumps the Go version used for Beam builds from 1.26.2 to 1.26.10. The SDK
container `boot` binaries are still built with go1.26.2, so scanners report the
stdlib CVEs that are fixed in the later 1.26.x patch releases.
This changes the same places as the last bump (#38131): the `toolchain` line
in sdks/go.mod, `goVersion` in BeamModulePlugin.groovy, `GOVERS` in
run_with_go_version.sh, and the dev-support and self-hosted runner Dockerfiles.
The `go 1.26.0` minimum is unchanged. golang.org/x/net is already at v0.62.0 on
master, so it doesn't need a bump here.
Fixes #41056
------------------------
Thank you for your contribution! Follow this checklist to help us
incorporate your contribution quickly and easily:
- [ ] Mention the appropriate issue in your description (for example:
`addresses #123`), if applicable. This will automatically add a link to the
pull request in the issue. If you would like the issue to automatically close
on merging the pull request, comment `fixes #<ISSUE NUMBER>` instead.
- [x] Update `CHANGES.md` with noteworthy changes.
- [ ] If this contribution is large, please file an Apache [Individual
Contributor License Agreement](https://www.apache.org/licenses/icla.pdf).
See the [Contributor Guide](https://beam.apache.org/contribute) for more
tips on [how to make review process
smoother](https://github.com/apache/beam/blob/master/CONTRIBUTING.md#make-the-reviewers-job-easier).
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
