From dd7b6d25fd753646fbe7a1677a2d2984de826a40 Mon Sep 17 00:00:00 2001 From: yesoreyeram <153843+yesoreyeram@users.noreply.github.com> Date: Fri, 17 Jan 2025 12:59:19 +0000 Subject: [PATCH 1/4] pin go version to latest --- .github/workflows/publish.yaml | 1 + .github/workflows/push.yaml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 08089125..81f25163 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -25,6 +25,7 @@ jobs: name: CD uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@main with: + go-version: latest branch: ${{ github.event.inputs.branch }} environment: ${{ github.event.inputs.environment }} docs-only: ${{ fromJSON(github.event.inputs.docs-only) }} diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml index 25f1c40d..12e1390d 100644 --- a/.github/workflows/push.yaml +++ b/.github/workflows/push.yaml @@ -11,5 +11,6 @@ jobs: name: CI uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@main with: + go-version: latest plugin-version-suffix: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }} run-playwright: true From c3cbda785eb089622e90489809ceee7ea3215d1d Mon Sep 17 00:00:00 2001 From: yesoreyeram <153843+yesoreyeram@users.noreply.github.com> Date: Fri, 17 Jan 2025 13:05:06 +0000 Subject: [PATCH 2/4] fix version --- .github/workflows/publish.yaml | 2 +- .github/workflows/push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 81f25163..893c5ed6 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -25,7 +25,7 @@ jobs: name: CD uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@main with: - go-version: latest + go-version: '1.23' branch: ${{ github.event.inputs.branch }} environment: ${{ github.event.inputs.environment }} docs-only: ${{ fromJSON(github.event.inputs.docs-only) }} diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml index 12e1390d..b9ad1037 100644 --- a/.github/workflows/push.yaml +++ b/.github/workflows/push.yaml @@ -11,6 +11,6 @@ jobs: name: CI uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@main with: - go-version: latest + go-version: '1.23' plugin-version-suffix: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }} run-playwright: true From 5179f1216472d2514583a18b2d8c934301f402ef Mon Sep 17 00:00:00 2001 From: yesoreyeram <153843+yesoreyeram@users.noreply.github.com> Date: Fri, 17 Jan 2025 13:09:41 +0000 Subject: [PATCH 3/4] fix version --- .github/workflows/publish.yaml | 2 +- .github/workflows/push.yaml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml index 893c5ed6..5383c790 100644 --- a/.github/workflows/publish.yaml +++ b/.github/workflows/publish.yaml @@ -25,7 +25,7 @@ jobs: name: CD uses: grafana/plugin-ci-workflows/.github/workflows/cd.yml@main with: - go-version: '1.23' + go-version: '1.23.5' branch: ${{ github.event.inputs.branch }} environment: ${{ github.event.inputs.environment }} docs-only: ${{ fromJSON(github.event.inputs.docs-only) }} diff --git a/.github/workflows/push.yaml b/.github/workflows/push.yaml index b9ad1037..299189a4 100644 --- a/.github/workflows/push.yaml +++ b/.github/workflows/push.yaml @@ -11,6 +11,6 @@ jobs: name: CI uses: grafana/plugin-ci-workflows/.github/workflows/ci.yml@main with: - go-version: '1.23' + go-version: '1.23.5' plugin-version-suffix: ${{ github.event_name == 'pull_request' && github.event.pull_request.head.sha || '' }} run-playwright: true From 76722648bbebf0be81c01b47b79428c024107c01 Mon Sep 17 00:00:00 2001 From: yesoreyeram <153843+yesoreyeram@users.noreply.github.com> Date: Fri, 17 Jan 2025 13:17:00 +0000 Subject: [PATCH 4/4] added changelog --- .changeset/few-seahorses-swim.md | 5 +++++ 1 file changed, 5 insertions(+) create mode 100644 .changeset/few-seahorses-swim.md diff --git a/.changeset/few-seahorses-swim.md b/.changeset/few-seahorses-swim.md new file mode 100644 index 00000000..ef8b8e4b --- /dev/null +++ b/.changeset/few-seahorses-swim.md @@ -0,0 +1,5 @@ +--- +'grafana-infinity-datasource': patch +--- + +Build and publish pipelines uses latest go lang version `1.23.5` which includes security fixes to the `crypto/x509` and `net/http` packages ( CVE-2024-45341 and CVE-2024-45336 ). More details can be found [here](https://groups.google.com/g/golang-announce/c/sSaUhLA-2SI)