From 8be3aee60ad96c39b02cb7574afe8c8be3841a23 Mon Sep 17 00:00:00 2001
From: Sriram <153843+yesoreyeram@users.noreply.github.com>
Date: Fri, 17 Jan 2025 14:07:58 +0000
Subject: [PATCH] pin go version to 1.23.5 in pipelines (#1121)

---
 .changeset/few-seahorses-swim.md | 5 +++++
 .github/workflows/publish.yaml   | 1 +
 .github/workflows/push.yaml      | 1 +
 3 files changed, 7 insertions(+)
 create mode 100644 .changeset/few-seahorses-swim.md

diff --git a/.changeset/few-seahorses-swim.md b/.changeset/few-seahorses-swim.md
new file mode 100644
index 000000000..ef8b8e4b2
--- /dev/null
+++ b/.changeset/few-seahorses-swim.md
@@ -0,0 +1,5 @@
+---
+'grafana-infinity-datasource': patch
+---
+
+Build and publish pipelines uses latest go lang version `1.23.5` which includes security fixes to the `crypto/x509` and `net/http` packages ( CVE-2024-45341 and CVE-2024-45336 ). More details can be found [here](https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI)
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 080891258..5383c7903 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -25,6 +25,7 @@ jobs:
     name: CD
     uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@main
     with:
+      go-version: '1.23.5'
       branch: ${{ github.event.inputs.branch }}
       environment: ${{ github.event.inputs.environment }}
       docs-only: ${{ fromJSON(github.event.inputs.docs-only) }}
diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml
index 25f1c40d2..299189a4c 100644
--- a/.github/workflows/push.yaml
+++ b/.github/workflows/push.yaml
@@ -11,5 +11,6 @@ jobs:
     name: CI
     uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@main
     with:
+      go-version: '1.23.5'
       plugin-version-suffix: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }}
       run-playwright: true