Mitigate vulnerabilities in Collector binary (#74)

Mitigate CVE-2023-44487
Dynatrace · Oct 16, 2023 · 261c231 · 261c231
1 parent aed25ed
commit 261c231
Show file tree

Hide file tree

Showing 4 changed files with 6 additions and 3 deletions.
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -19,7 +19,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v4
         with:
-          go-version: "~1.21.0"
+          go-version: "~1.21.3"
           check-latest: true
           cache-dependency-path: internal/tools/go.sum
 

diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
@@ -17,7 +17,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-go@v4
         with:
-          go-version: "~1.21.0"
+          go-version: "~1.21.3"
       - uses: docker/setup-qemu-action@v3
         with:
           platforms: arm64,ppc64le

diff --git a/.github/workflows/snapshot.yaml b/.github/workflows/snapshot.yaml
@@ -15,7 +15,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-go@v4
         with:
-          go-version: "~1.21.0"
+          go-version: "~1.21.3"
       - uses: docker/setup-qemu-action@v3
         with:
           platforms: arm64,ppc64le

diff --git a/manifest.yaml b/manifest.yaml
@@ -34,3 +34,6 @@ processors:
 
 connectors:
   - gomod: go.opentelemetry.io/collector/connector/forwardconnector v0.87.0
+
+replaces:
+  - google.golang.org/grpc => google.golang.org/grpc v1.58.3