Merge pull request #304 from splitio/fix-vulnerabilities

Upgrade go to 1.23.5

Author: sanzmauro

CHANGES.txt

@@ -1,10 +1,11 @@
-5.10.0 (Jan 17, 2024)
+5.10.0 (Jan 23, 2025)
 - Added support for the new impressions tracking toggle available on feature flags, both respecting the setting. Read more in our docs.
-- Added support for arm64.
+- Added support for arm64 in docker images.
 - Fixed vulnerabilities:
-   - Updated golang image to 1.23.4.
-   - Updated x/crypto dependency.
-   - Updated x/net dependency.
+   - Updated golang image to 1.23.5
+   - Updated debian image to 12.9
+   - Updated golang.org/x/net to 0.33.0
+   - Updated golang.org/x/crypto to 0.31.0
 
 5.9.0 (Dec 2, 2024)
 - Split Proxy:

docker/Dockerfile.proxy

@@ -1,5 +1,5 @@
 # Build stage
-FROM golang:1.23.4-bookworm AS builder
+FROM golang:1.23.5-bookworm AS builder
 
 ARG EXTRA_BUILD_ARGS
 ARG FIPS_MODE
@@ -17,7 +17,7 @@ RUN bash -c 'if [[ "${FIPS_MODE}" = "enabled" ]]; \
     fi'
 
 # Runner stage
-FROM debian:12.8 AS runner
+FROM debian:12.9 AS runner
 
 RUN apt update -y
 RUN apt install -y bash ca-certificates

docker/Dockerfile.synchronizer

@@ -1,5 +1,5 @@
 # Build stage
-FROM golang:1.23.4-bookworm AS builder
+FROM golang:1.23.5-bookworm AS builder
 
 ARG EXTRA_BUILD_ARGS
 ARG FIPS_MODE
@@ -17,7 +17,7 @@ RUN bash -c 'if [[ "${FIPS_MODE}" = "enabled" ]]; \
     fi'
 
 # Runner stage
-FROM debian:12.8 AS runner
+FROM debian:12.9 AS runner
 
 RUN apt update -y
 RUN apt install -y bash ca-certificates

go.mod

@@ -1,6 +1,6 @@
 module github.com/splitio/split-synchronizer/v5
 
-go 1.23.4
+go 1.23.5
 
 require (
 	github.com/gin-contrib/cors v1.6.0