Update Go to 1.24.6 (#31784)

Ran
```
make update-go version=1.24.6
```
And then updated the `sha256`s manually in the Dockerfiles.

Fixes https://nvd.nist.gov/vuln/detail/CVE-2025-47907
```
Cancelling a query (e.g. by cancelling the context passed to one of the query methods) during a call
to the Scan method of the returned Rows can result in unexpected results if other queries are being
made in parallel. This can result in a race condition that may overwrite the expected results with those
of another query, causing the call to Scan to return either unexpected results from the other
query or an error.
```
This commit is contained in:
Lucas Manuel Rodriguez 2025-08-12 08:10:05 -03:00 committed by GitHub
parent 8ad5a43cfe
commit d849e01add
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
10 changed files with 11 additions and 7 deletions

View file

@ -13,10 +13,12 @@ on:
paths:
- "orbit/**.go"
- ".github/workflows/fleet-and-orbit.yml"
- "Dockerfile-desktop-linux"
pull_request:
paths:
- "orbit/**.go"
- ".github/workflows/fleet-and-orbit.yml"
- "Dockerfile-desktop-linux"
workflow_dispatch: # Manual
# This allows a subsequently queued workflow run to interrupt previous runs

View file

@ -1,4 +1,4 @@
FROM --platform=linux/amd64 golang:1.24.5-bullseye@sha256:254c0d1f13aad57bb210caa9e049deaee17ab7b8a976dba755cba1adf3fbe291
FROM --platform=linux/amd64 golang:1.24.6-bullseye@sha256:637f45ef9f8fb4228406268d544df3f1251703cda025f706902c3627fa621c54
LABEL maintainer="Fleet Developers"
RUN mkdir -p /usr/src/fleet

1
changes/update-go-1.24.6 Normal file
View file

@ -0,0 +1 @@
* Updated go to 1.24.6

2
go.mod
View file

@ -1,6 +1,6 @@
module github.com/fleetdm/fleet/v4
go 1.24.5
go 1.24.6
require (
cloud.google.com/go/pubsub v1.45.1

View file

@ -1,4 +1,4 @@
FROM golang:1.24.5-alpine3.21@sha256:933e5a0829a1f97cc99917e3b799ebe450af30236f5a023a3583d26b5ef9166f
FROM golang:1.24.6-alpine3.21@sha256:50f8a10a46c0c26b5b816a80314f1999196c44c3e3571f41026b061339c29db6
ARG TAG
RUN apk add git
RUN git clone -b $TAG --depth=1 --no-tags --progress --no-recurse-submodules https://github.com/fleetdm/fleet.git && cd /go/fleet/cmd/osquery-perf/ && go build .

View file

@ -0,0 +1 @@
* Updated go to 1.24.6

View file

@ -1,4 +1,4 @@
FROM golang:1.24.5-alpine3.21@sha256:933e5a0829a1f97cc99917e3b799ebe450af30236f5a023a3583d26b5ef9166f
FROM golang:1.24.6-alpine3.21@sha256:50f8a10a46c0c26b5b816a80314f1999196c44c3e3571f41026b061339c29db6
ARG TAG
RUN apk update && apk add --no-cache git
RUN git clone -b $TAG --depth=1 --no-tags --progress --no-recurse-submodules https://github.com/fleetdm/fleet.git && cd /go/fleet/tools/mdm/migration/mdmproxy && go build .

View file

@ -1,6 +1,6 @@
module bitlocker
go 1.24.5
go 1.24.6
require github.com/go-ole/go-ole v1.3.0

View file

@ -1,6 +1,6 @@
module github.com/fleetdm/fleet/v4/tools/snapshot
go 1.24.5
go 1.24.6
require (
github.com/manifoldco/promptui v0.9.0

View file

@ -1,6 +1,6 @@
module terraform-provider-fleetdm
go 1.24.5
go 1.24.6
require (
github.com/hashicorp/terraform-plugin-framework v1.7.0