pin go version to 1.23.5 in pipelines (#1121)

grafana · Jan 17, 2025 · 8be3aee · 8be3aee
1 parent 0c70380
commit 8be3aee
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 0 deletions.
diff --git a/.changeset/few-seahorses-swim.md b/.changeset/few-seahorses-swim.md
@@ -0,0 +1,5 @@
+---
+'grafana-infinity-datasource': patch
+---
+
+Build and publish pipelines uses latest go lang version `1.23.5` which includes security fixes to the `crypto/x509` and `net/http` packages ( CVE-2024-45341 and CVE-2024-45336 ). More details can be found [here](https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI)
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
@@ -25,6 +25,7 @@ jobs:
     name: CD
     uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@main
     with:
+      go-version: '1.23.5'
       branch: ${{ github.event.inputs.branch }}
       environment: ${{ github.event.inputs.environment }}
       docs-only: ${{ fromJSON(github.event.inputs.docs-only) }}

diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
@@ -11,5 +11,6 @@ jobs:
     name: CI
     uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@main
     with:
+      go-version: '1.23.5'
       plugin-version-suffix: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }}
       run-playwright: true