go 1.20 builder, GO-2023-2102, CVE-2023-44487, CVE-2023-39325 #33
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Upgrade builder to go 1.20.10+ by moving from deprecated golang:1.19-buster to next supported version
golang:1.20-bullseye
Upgrade golang.org/x/net to v0.17.0
Upgrade google.golang.org/grpc to v1.58.3 to address follow up advisory
https://go.dev/issue/63417
https://go.dev/cl/534215
https://go.dev/cl/534235
https://groups.google.com/g/golang-announce/c/iNNxDTCjZvo/m/UDd7VKQuAAAJ
https://vuln.go.dev/ID/GO-2023-2102.json
Signed-off-by: Tiger Kaovilai [email protected]