From e8f78bf9f1a4daa57e9327a35490cb9debd355ba Mon Sep 17 00:00:00 2001 From: Didier Roche Date: Thu, 7 Dec 2023 09:09:10 +0100 Subject: [PATCH] Bump the toolchain to fix vulnerabilities Set to toolchain to 1.21.5 to avoid some vulnerabilities in our code path. Downgrade the go mod version itself as in term of language, we are compatible with it and there is no bug fixes requiring a newer version. The desired toolchain can still be overriden if desired, but it helps knowing our requirements for fixing those vulnerabilitie issues. --- go.mod | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 3c29e6c13..4197dc43c 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,8 @@ module github.com/ubuntu/authd -go 1.21.4 +go 1.21.0 + +toolchain go1.21.5 require ( github.com/charmbracelet/bubbles v0.16.1