Skip to content

Update Go version from 1.24.4 to 1.26.0 to resolve security vulnerabilities#51

Merged
hrai-nr merged 6 commits into
mainfrom
cveFix
Mar 3, 2026
Merged

Update Go version from 1.24.4 to 1.26.0 to resolve security vulnerabilities#51
hrai-nr merged 6 commits into
mainfrom
cveFix

Conversation

@voorepreethi
Copy link
Copy Markdown
Contributor

@voorepreethi voorepreethi commented Dec 30, 2025

Description

Updates the Go toolchain version from 1.24.4 to 1.26.0 across the project to resolve multiple security vulnerabilities detected by AWS Lambda.

Changes

  • Updated src/go.mod to use Go 1.26.0
  • Updated integration-tests/go.mod to use Go 1.26.0
  • Updated all GitHub Actions workflows to use Go 1.26.0:
    • .github/workflows/pull_request.yaml
    • .github/workflows/release-lambda-code.yaml
    • .github/workflows/release-template-files.yaml
    • .github/workflows/run-e2e-tests.yaml (5 jobs updated)
  • Updated integration test Lambda runtime reference to provided.al2023

Security Fixes

This update resolves the following CVEs:

Testing

  • ✅ All unit tests pass with Go 1.26.0
  • ✅ Code builds successfully
  • ✅ Module verification passed
  • ⏳ CI/CD pipeline will validate with E2E tests

LambdaHandler = "main"
// LambdaRuntime type of lambda runtime
LambdaRuntime = "go1.x"
LambdaRuntime = "provided.al2023"
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

will this work?

Copy link
Copy Markdown
Contributor

@maya-jha maya-jha left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to also update release version inversion.go

hrai-nr
hrai-nr previously approved these changes Jan 5, 2026
maya-jha
maya-jha previously approved these changes Jan 29, 2026
@maya-jha maya-jha self-requested a review February 5, 2026 06:59
@hrai-nr hrai-nr dismissed stale reviews from maya-jha and themself via dabde71 February 24, 2026 11:46
Comment thread .github/workflows/pull_request.yaml Outdated
uses: actions/setup-go@v5
with:
go-version: '1.24.4'
go-version: '1.25.5'
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@hrai-nr hrai-nr changed the title Update Go version from 1.24.4 to 1.25.5 to resolve security vulnerabilities Update Go version from 1.24.4 to 1.26.0 to resolve security vulnerabilities Feb 26, 2026
@hrai-nr hrai-nr merged commit 2ff1e4d into main Mar 3, 2026
45 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants