71 Commits

Author SHA1 Message Date
Piotr Kazmierczak
c7233854b9 build: upgrade to Go 1.25.1 (#26823) 2025-10-03 08:59:12 +02:00
Deniz Onur Duzgun
8a96929870 bump: go and go-getter versions (#26713)
* bump: go and go-getter versions

* add changelog
2025-09-08 11:10:25 -04:00
Deniz Onur Duzgun
79bf619833 build: update toolchain to go 1.24.6 (#26451)
* build: update toolchain to go 1.24.6

* add changelog
2025-08-07 08:44:41 -04:00
Deniz Onur Duzgun
f23ca749e7 build: update toolchain to go 1.24.5 (#26297) 2025-07-18 13:38:11 -04:00
Tim Gross
94c3d23271 build: update toolchain to go 1.24.4 (#25999) 2025-06-05 16:26:20 -04:00
Tim Gross
3690a0118e build: update go toolchain to 1.24.3 (#25818) 2025-05-07 09:57:31 -04:00
Michael Schurter
95c914624e build: Update Go to v1.24.0 (#25623)
* build: Update Go to v1.24.0

Fixes Go CVE https://pkg.go.dev/vuln/GO-2025-3563
2025-04-08 16:07:47 -07:00
James Rasell
2eb35a4678 build: Update Go to v1.24.1 (#25249) 2025-03-06 10:33:14 +00:00
James Rasell
aef33e264a build: update to go 1.23.6 (#25041) 2025-02-07 08:09:31 +00:00
James Rasell
7a450f5499 build: update to go 1.23.5 (#24963) 2025-01-28 15:47:00 +00:00
Seth Hoenig
b36c77781f build: update to go1.23.3 (#24419)
https://github.com/golang/go/issues?q=milestone%3AGo1.23.3+label%3ACherryPickApproved
2024-11-12 10:59:02 -06:00
Tim Gross
7dc57efe1b build: update go toolchain to 1.23.2 (#24108)
Picks up some small bug fixes but one especially relevant to Nomad is the
`os/exec` file descriptor, which could impact script check / change mode for
task drivers without isolated exec (ex. `raw_exec`).

Ref: https://github.com/golang/go/issues?q=milestone%3AGo1.23.2+label%3ACherryPickApproved
Ref: https://github.com/golang/go/issues/69402
2024-10-02 10:29:10 -04:00
Seth Hoenig
212a72b203 deps update go1.23.1 (#23972)
* deps: update to go1.23.1

* deps: update to golangci-lint 1.61.0
2024-09-16 11:03:23 -05:00
Seth Hoenig
f89335e01b build: update to go1.22.6 (#23805) 2024-08-14 09:20:14 -05:00
Deniz Onur Duzgun
441f8f21ff build: update to go1.22.5 (#23498) 2024-07-03 15:33:40 -04:00
Tim Gross
c99428d553 build: update to go1.22.4 (#23172)
Update Go toolchain to 1.22.4, which addresses two vulnerabilities in the Go
stdlib.

* CVE-2024-24789: impacts handling of certain types of invalid zip files, which
  could be exploited to create a zip file with unexpected contents. This could
  potentially impact Nomad users of `artifact` blocks who download untrusted
  artifacts.
* CVE-2024-24790: impacts parsing of IPv4-mapped IPv6 addresses.
2024-06-05 09:03:15 -04:00
Seth Hoenig
55b0795866 build: upgrade to go1.22 (#20066)
* build: upgrade to go1.22

* add cl

* build: use codecgen from go-msgpack v1.1.5+base32 and stringer 0.18.0

for compatability with go1.22

* ci: update golangci-lint to 1.56.2

* build: update hclogvet for go1.22

* build: bump to go1.22.1
2024-03-06 09:54:04 -06:00
Seth Hoenig
aad932eeee build: update to go1.21.6 (#19709) 2024-01-11 09:48:56 -06:00
Michael Schurter
7ef5c9e906 Update to Go 1.21.5 2023-12-05 11:23:31 -08:00
Seth Hoenig
cf2f48efd4 build: update to Go 1.21.4 (#19013) 2023-11-07 13:18:07 -06:00
Tim Gross
635afee376 build: bump to go 1.21.3 (#18717)
Go 1.21.3 fixes an important HTTP2 CVE (see CVE-2023-39325 and
CVE-2023-44487). Nomad does not use HTTP2 and is not vulnerable. However we
should pick up the toolchain bump if for no other reason than we don't have to
answer questions about that.
2023-10-10 16:37:24 -04:00
Seth Hoenig
d9341f0664 update go1.21 (#18184)
* build: update to go1.21

* go: eliminate helpers in favor of min/max

* build: run go mod tidy

* build: swap depguard for semgrep

* command: fixup broken tls error check on go1.21
2023-08-14 08:43:27 -05:00
James Rasell
738bdb213d build: update to go1.20.6 (#18044) 2023-07-24 16:13:22 +01:00
Tim Gross
ceb3b4c0f1 build: update to go1.20.5 (#17451)
Go released a security update to fix build-time code injection and execution via
CGO. This doesn't impact already-released versions of Nomad, just the build
toolchain, so we won't be releasing a Nomad security update to go with it.
2023-06-07 11:44:59 -04:00
Michael Schurter
4d9b969d81 build: upgrade from go 1.20.3 to 1.20.4 (#17056)
Includes CVE fixes that do *not* impact Nomad:

https://groups.google.com/g/golang-announce/c/MEb0UyuSMsU
2023-05-02 13:09:11 -07:00
Tim Gross
bb0466b23a upgrade go to 1.20.3 2023-04-05 12:18:19 -04:00
Michael Schurter
5f37b2fba0 build: update from go1.20.1 to go1.20.2 (#16427)
* build: update from go1.20.1 to go1.20.2

Note that the CVE fixed in go1.20.2 does *not* impact Nomad.

https://github.com/golang/go/issues/58647
2023-03-13 09:47:07 -07:00
Tim Gross
1a96f9e752 build: update to go1.20.1 (#16182) 2023-02-14 15:03:26 -05:00
Seth Hoenig
535795abc8 build: update to go1.20 (#16029)
* build: update to go1.20

* build: use stringy go1.20 in circle yaml

* tests: handle new x509 certificate error structure in go1.20

* cl: add cl entry
2023-02-03 08:14:53 -06:00
Seth Hoenig
fd3f0d86c2 build: update to go 1.19.5 (#15769) 2023-01-13 09:57:32 -06:00
Seth Hoenig
152f8af960 build: update to go1.19.3 (#15099) 2022-11-01 15:54:49 -05:00
Seth Hoenig
7a8b1368b7 build: update go version to go1.19.1 (#14653)
minor update, no CL needed
2022-09-22 09:40:01 -05:00
Seth Hoenig
aebd61f5c5 build: update to go1.19 2022-08-16 08:40:57 -05:00
Seth Hoenig
527f2a97de build: update to go1.18.5 2022-08-02 07:36:35 -05:00
Seth Hoenig
78fb9c0150 build: update to go1.18.3
Release Notes:
https://groups.google.com/g/golang-announce/c/TzIC9-t8Ytg

Contains 4 security fixes - the 2 related to Windows might be relevant.
2022-07-01 10:12:56 -05:00
Seth Hoenig
04ceba2bfb build: update golang version to 1.18.2
This PR update to Go 1.18.2. Also update the versions of hclfmt
and go-hclogfmt which includes newer dependencies necessary for dealing
with go1.18.

The hcl v2 branch is now 'nomad-v2.9.1+tweaks2', to include a fix for
newer macOS versions: 8927e75e82
2022-05-25 10:04:04 -05:00
Seth Hoenig
91d91e28e4 build: update golang to 1.17.9 2022-04-21 11:43:01 -05:00
Tim Gross
9439d7a823 golang security update 1.17.5 2021-12-10 13:50:22 -05:00
Tim Gross
84888390f7 build: bump go version to 1.17.3 (#11461) 2021-11-05 15:34:24 -04:00
Mahmood Ali
5cd5c2c9ee build: Update to golang 1.17.1 2021-10-01 09:41:25 -04:00
Mahmood Ali
d102df40a5 update golang to 1.16.7 (#11083) 2021-08-25 11:56:46 -04:00
Mahmood Ali
66d590c64b golang: update to 1.16.5 (#10733)
1.16.5 contains some security fixes for zip that are notable to get: https://github.com/golang/go/issues?q=milestone%3AGo1.16.5+label%3ACherryPickApproved
2021-06-09 11:51:41 -04:00
Tim Gross
8ca717705a update golang to 1.16.4 2021-05-07 11:06:54 -04:00
Mahmood Ali
1638410170 update golang to 1.16.3 (#10484) 2021-04-30 13:52:05 -04:00
Drew Bailey
57b0ed0444 go get on the remote mac instance installs with read-only, allow for … (#10351)
* go get on the remote mac instance installs with read-only, allow for rm step

* Update scripts/release/mac-remote-build

Co-authored-by: Mahmood Ali <mahmood@hashicorp.com>

Co-authored-by: Mahmood Ali <mahmood@hashicorp.com>
2021-04-09 15:50:27 -04:00
Mahmood Ali
02ea1e2146 build: use golang 1.16 2021-03-09 14:20:40 -05:00
Michael Schurter
240697b636 build: upgrade from Go 1.15.5 -> 1.15.6
Also updated scripts/update_golang_version.sh to handle new CircleCI
file layout.
2021-01-04 08:34:00 -08:00
Michael Schurter
d09f09047f build: upgrade from Go 1.15.4 to 1.15.5
Despite being a security release for Go, we do not believe Nomad is
impacted.
2020-11-12 14:19:26 -08:00
Michael Schurter
c1dc510335 go: update from 1.15.1 to 1.15.4
1.15.5 is due in a couple days but we may release before then.
2020-11-10 08:35:25 -08:00
Mahmood Ali
d7f14d12c1 Upgrade to golang 1.15 (#8858)
Upgrade to golang 1.15

Starting with golang 1.5, setting Ctty value result in `Setctty set but Ctty not valid in child` error, as part of https://github.com/golang/go/issues/29458 .
This commit lifts the fix in https://github.com/creack/pty/pull/97 .
2020-09-09 15:59:29 -04:00