[release/1.4] Update Go to 1.16.8#6010
Merged
AkihiroSuda merged 12 commits intocontainerd:release/1.4from Sep 27, 2021
Merged
Conversation
This reverts commit 2009fa7. Signed-off-by: Sebastiaan van Stijn <[email protected]>
This reverts commit 287fd67. Signed-off-by: Sebastiaan van Stijn <[email protected]>
This reverts commit d02ed46. Signed-off-by: Sebastiaan van Stijn <[email protected]>
This reverts commit ac87e05. Signed-off-by: Sebastiaan van Stijn <[email protected]>
|
Skipping CI for Draft Pull Request. |
|
Build succeeded.
|
|
Build succeeded.
|
thaJeztah
force-pushed
the
1.4_update_golang_1.16
branch
from
e1243c0 to
028038f
Compare
|
Build succeeded.
|
thaJeztah
force-pushed
the
1.4_update_golang_1.16
branch
from
028038f to
81c0d5b
Compare
|
Build succeeded.
|
thaJeztah
force-pushed
the
1.4_update_golang_1.16
branch
from
81c0d5b to
76d3a5b
Compare
|
Build succeeded.
|
thaJeztah
force-pushed
the
1.4_update_golang_1.16
branch
from
76d3a5b to
25e6507
Compare
|
Build succeeded.
|
thaJeztah
force-pushed
the
1.4_update_golang_1.16
branch
from
25e6507 to
a39cf41
Compare
Signed-off-by: Sebastiaan van Stijn <[email protected]>
Signed-off-by: Phil Estes <[email protected]> (cherry picked from commit c55492f) Signed-off-by: Sebastiaan van Stijn <[email protected]>
Signed-off-by: Phil Estes <[email protected]> (cherry picked from commit 8cbef0f) Signed-off-by: Sebastiaan van Stijn <[email protected]>
go1.16.3 (released 2021/04/01) includes fixes to the compiler, linker, runtime, the go command, and the testing and time packages. See the Go 1.16.3 milestone on our issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.16.3+label%3ACherryPickApproved full diff: golang/go@go1.16.2...go1.16.3 Signed-off-by: Sebastiaan van Stijn <[email protected]> (cherry picked from commit fbe1e14) Signed-off-by: Sebastiaan van Stijn <[email protected]>
fix [#45710](golang/go#45710) and CVE-2021-31525. Signed-off-by: Jintao Zhang <[email protected]> (cherry picked from commit 79d800b) Signed-off-by: Sebastiaan van Stijn <[email protected]>
Release notes: https://golang.org/doc/devel/release#go1.16 Signed-off-by: Akihiro Suda <[email protected]> (cherry picked from commit e72046f) Signed-off-by: Sebastiaan van Stijn <[email protected]>
go1.16.7 (released 2021-08-05) includes a security fix to the net/http/httputil package, as well as bug fixes to the compiler, the linker, the runtime, the go command, and the net/http package. See the Go 1.16.7 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.16.7+label%3ACherryPickApproved Signed-off-by: Sebastiaan van Stijn <[email protected]> (cherry picked from commit 42a28ad) Signed-off-by: Sebastiaan van Stijn <[email protected]>
This includes additional fixes for CVE-2021-39293. go1.16.8 (released 2021-09-09) includes a security fix to the archive/zip package, as well as bug fixes to the archive/zip, go/internal/gccgoimporter, html/template, net/http, and runtime/pprof packages. See the Go 1.16.8 milestone on the issue tracker for details: https://github.com/golang/go/issues?q=milestone%3AGo1.16.8+label%3ACherryPickApproved Signed-off-by: Sebastiaan van Stijn <[email protected]>
thaJeztah
force-pushed
the
1.4_update_golang_1.16
branch
from
a39cf41 to
bfe529e
Compare
|
Build succeeded.
|
|
Build succeeded.
|
thaJeztah
commented
Sep 15, 2021
| path: src/github.com/Microsoft/hcsshim | ||
|
|
||
| - name: Make | ||
| env: |
Member
Author
There was a problem hiding this comment.
Not sure if more changes are needed in the release.yml though (wasn't sure how to test/verify this)
Member
There was a problem hiding this comment.
I usually manually test release.yml changes by pushing a tag to my fork, I can test this one
Member
Author
|
For the record; I wasn't sure if we wanted to update the 1.4 branch to go1.16, but the latest 1.16 releases contain some security fixes (not sure if they affect the containerd code), so I thought I'd open this for consideration (and to see if CI was happy) |
kzys
approved these changes
Sep 17, 2021
AkihiroSuda
approved these changes
Sep 19, 2021
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
8 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This includes additional fixes for CVE-2021-39293.
go1.16.8 (released 2021-09-09) includes a security fix to the archive/zip package,
as well as bug fixes to the archive/zip, go/internal/gccgoimporter, html/template,
net/http, and runtime/pprof packages. See the Go 1.16.8 milestone on the issue
tracker for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.16.8+label%3ACherryPickApproved
This brings the 1.4 branch to use Go 1.16 (as Go1.15 now reached end of support)
It first reverts the Go updates that were only in the 1.4 release branch:
Then backports the Go 1.16 PRs (so that commit history preserves their descriptions):
Where needed, a manual find/replace was done after each, and conflicts resolved (files that were not yet in 1.4 or unrelated changes in CI/GHA)
An extra commit was added as well to disable go modules where needed (go1.16 is quite aggressive in enforcing modules)