Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Go #770

Merged
merged 1 commit into from
Mar 31, 2025
Merged

Update Go #770

merged 1 commit into from
Mar 31, 2025

Conversation

SuperQ
Copy link
Member

@SuperQ SuperQ commented Mar 13, 2025

  • Update Go to support 1.24.
  • Update minimum Go version to 1.23.0.
  • Bump Go modules.

@SuperQ SuperQ requested a review from ArthurSens March 13, 2025 19:56
* Update Go to support 1.24.
* Update minimum Go version to 1.23.0.
* Bump Go modules.

Signed-off-by: SuperQ <[email protected]>
@@ -1,6 +1,6 @@
module github.com/prometheus/common

go 1.21
go 1.23.0
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Would this force golang to set their minimum go version to 1.23 as well? I believe we're still in 1.22 over there 🤔

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes, unfortunately, the upstream Go maintainers (golang.org/x/oauth2) have set this as a minimum requirement.

There's now a upstream Go bot auto-updating this: golang/oauth2@3f78298

We'll have to reconsider our support policy for client_golang versions. 😿

@SuperQ SuperQ requested review from kakkoyun, bwplotka and vesari March 26, 2025 10:45
@SuperQ
Copy link
Member Author

SuperQ commented Mar 26, 2025

Ping client_golang maintainers.

Upstream Go is now bumping minimum Go versions in golang.org/x/ packages to only support the latest 2 releases. This forces us to bump our support here in order to pull in updates that include security fixes.

This is blocking some updates that are making vulnerability scanners complain. Even if there are no actual issues it would be good to move forward with updating our Go version support in common/client_golang to match.

@SuperQ SuperQ requested a review from ArthurSens March 31, 2025 09:38
@SuperQ SuperQ merged commit 3874acf into main Mar 31, 2025
9 checks passed
@SuperQ SuperQ deleted the superq/go_1.24 branch March 31, 2025 10:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants