Skip to content

Conversation

dduzgun-security
Copy link
Collaborator

@dduzgun-security dduzgun-security commented Aug 6, 2025

Description

Pick up the Go toolchain update for 1.23.12.
Resolves CVE-2025-47906 vulnerability in os/exec LookPath function.

Fix linter

Testing & Reproduction steps

Links

PR Checklist

  • updated test coverage
  • external facing docs updated
  • appropriate backport labels added
  • not a security concern

PCI review checklist

  • I have documented a clear reason for, and description of, the change I am making.

  • If applicable, I've documented a plan to revert these changes if they require more than reverting the pull request.

  • If applicable, I've documented the impact of any changes to security controls.

    Examples of changes to security controls include using new access control methods, adding or removing logging pipelines, etc.

@dduzgun-security dduzgun-security requested a review from a team as a code owner August 6, 2025 22:37
@github-actions github-actions bot added theme/api Relating to the HTTP API interface pr/dependencies PR specifically updates dependencies of project labels Aug 6, 2025
@dduzgun-security dduzgun-security added the backport/all Apply backports for all active releases per .release/versions.hcl label Aug 6, 2025
Copy link
Member

@sreeram77 sreeram77 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@dduzgun-security linter workflow seems to be failing. Could you please take a look at it?

@dduzgun-security dduzgun-security changed the title build: update toolchain to go 1.23.12 build: update toolchain to go 1.23.12 and fix linter Aug 11, 2025
@dduzgun-security
Copy link
Collaborator Author

@srikrishmurthy it should be fixed now

@sreeram77 sreeram77 merged commit 5e68807 into main Aug 12, 2025
118 checks passed
@sreeram77 sreeram77 deleted the golang-1.23.12 branch August 12, 2025 06:21
@hc-github-team-consul-core hc-github-team-consul-core added backport/1.21 Changes are backported to 1.21 backport/ent/1.18 Changes are backported to 1.18 ent backport/ent/1.19 Changes are backported to 1.19 ent backport/ent/1.20 backport to ent 1.20 labels Aug 12, 2025
@sreeram77 sreeram77 added the backport/ent/1.21 changes are backported to 1.21 ent label Aug 12, 2025
sreeram77 added a commit that referenced this pull request Aug 12, 2025
* build: update toolchain to go 1.23.12

* add changelog

* bump again

* fix lint

* fix missing lint alerts

* fix linter

* bump golangci-lint to v8.0.0

* bump linter version

---------

Co-authored-by: Sreeram Narayanan <sreeram.narayanan@hashicorp.com>
sreeram77 added a commit that referenced this pull request Aug 12, 2025
… release/1.21.x (#22565)

build: update toolchain to go 1.23.12 and fix linter (#22547)

* build: update toolchain to go 1.23.12

* add changelog

* bump again

* fix lint

* fix missing lint alerts

* fix linter

* bump golangci-lint to v8.0.0

* bump linter version

---------

Co-authored-by: Deniz Onur Duzgun <59659739+dduzgun-security@users.noreply.github.com>
Co-authored-by: Sreeram Narayanan <sreeram.narayanan@hashicorp.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
backport/all Apply backports for all active releases per .release/versions.hcl backport/ent/1.18 Changes are backported to 1.18 ent backport/ent/1.19 Changes are backported to 1.19 ent backport/ent/1.20 backport to ent 1.20 backport/ent/1.21 changes are backported to 1.21 ent backport/1.21 Changes are backported to 1.21 pr/dependencies PR specifically updates dependencies of project theme/api Relating to the HTTP API interface
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants