Skip to content

Conversation

@voorepreethi
Copy link
Contributor

Description

Updates the Go toolchain version from 1.24.4 to 1.25.5 across the project to resolve multiple security vulnerabilities detected by AWS Lambda.

Changes

  • Updated src/go.mod to use Go 1.25.5
  • Updated integration-tests/go.mod to use Go 1.25.5
  • Updated all GitHub Actions workflows to use Go 1.25.5:
    • .github/workflows/pull_request.yaml
    • .github/workflows/release-lambda-code.yaml
    • .github/workflows/release-template-files.yaml
    • .github/workflows/run-e2e-tests.yaml (5 jobs updated)
  • Updated integration test Lambda runtime reference to provided.al2023

Security Fixes

This update resolves the following CVEs:

Testing

  • ✅ All unit tests pass with Go 1.25.5
  • ✅ Code builds successfully
  • ✅ Module verification passed
  • ⏳ CI/CD pipeline will validate with E2E tests

LambdaHandler = "main"
// LambdaRuntime type of lambda runtime
LambdaRuntime = "go1.x"
LambdaRuntime = "provided.al2023"
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

will this work?

Copy link
Contributor

@maya-jha maya-jha left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to also update release version inversion.go

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants