Skip to content

Backport #7906, #7924 and #7923 to release-1.22 - #7927

Merged
friedrichg merged 3 commits into
release-1.22from
backport-7923-release-1.22
Nov 10, 2026
Merged

friedrichg merged 3 commits into
release-1.22from
backport-7923-release-1.22

Conversation

@friedrichg

Copy link
Copy Markdown
Member

Backports #7906, #7924 and #7923 to release-1.22, so the 1.22.0 release is built with Go 1.27.3 (security fixes to crypto/x509, CVE-2026-111943).

#7923 alone is not sufficient: the new build image master-c8b29b5f7b uses Go 1.27.3, and Go 1.27.3 writes export data that golangci-lint v2.13.1 and golang.org/x/tools v0.49.0 or older cannot read. release-1.22 is on x/tools v0.47.0, so #7924 is also necessary.

The CHANGELOG entry is in the 1.22.0 in progress section. All commits are cherry-picked with -x. make lint passes in the new build image (0 issues), and go build ./... passes.

Signed-off-by: Sungjin1212 <tjdwls1201@gmail.com>
(cherry picked from commit 142065f)
Signed-off-by: Friedrich Gonzalez <1517449+friedrichg@users.noreply.github.com>
…7924)

Go 1.27.3 writes export data version 5, which golangci-lint v2.13.1 and
faillint (golang.org/x/tools v0.49.0) cannot read. Upgrade both so lint
works with the Go 1.27.3 build image, and fix the new errcheck findings.

Signed-off-by: Sungjin1212 <tjdwls1201@gmail.com>
(cherry picked from commit c8b29b5)
Signed-off-by: Friedrich Gonzalez <1517449+friedrichg@users.noreply.github.com>
Signed-off-by: Sungjin1212 <tjdwls1201@gmail.com>
(cherry picked from commit 45e170e)
Signed-off-by: Friedrich Gonzalez <1517449+friedrichg@users.noreply.github.com>
@friedrichg
friedrichg requested a review from a team as a code owner November 9, 2026 21:53
@friedrichg
friedrichg requested review from SungJin1212 and removed request for a team November 9, 2026 21:53
@friedrichg
friedrichg merged commit 8975a3c into release-1.22 Nov 10, 2026
40 checks passed
@friedrichg
friedrichg deleted the backport-7923-release-1.22 branch November 10, 2026 17:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants