From f6c6a88fe8175bbd8b93c7b4567d64bf47372fd4 Mon Sep 17 00:00:00 2001 From: Martin Atkins Date: Tue, 13 Aug 2019 14:00:06 -0700 Subject: [PATCH] build: Use Go 1.12.8 This this includes some security fixes that don't impact Terraform along with a number of general improvements and fixes in the Go toolchain that don't appear to affect Terraform behavior. - URL parsing (such as in the "source" argument in a "module" block) now validates more strictly the port portion, rejecting non-numeric ports. Previously this could potentially lead to parts of the URL being silently ignored. - The temporary callback server for the forthcoming OAuth client implementation in "terraform login" would otherwise have been vulnerable to local (on the same host) denial of service attacks, which is not a common attack vector but good to fix anyway. --- .go-version | 2 +- .travis.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.go-version b/.go-version index 89c881bc9..f61e31516 100644 --- a/.go-version +++ b/.go-version @@ -1 +1 @@ -1.12.4 +1.12.8 diff --git a/.travis.yml b/.travis.yml index 012e04697..cce190d24 100644 --- a/.travis.yml +++ b/.travis.yml @@ -4,7 +4,7 @@ services: - docker language: go go: -- "1.12.4" +- "1.12.8" # add TF_CONSUL_TEST=1 to run consul tests # they were causing timouts in travis