linux/poky.git/meta/recipes-devtools/go, branch mickledore-4.2.2

go: Upgrade 1.20.4 -> 1.20.5

2023-06-30T14:07:59+00:00

Upgrade to latest 1.20.x release: go.git$ git log --oneline go1.20.4..go1.20.5 e827d41c0a (tag: go1.20.5) [release-branch.go1.20] go1.20.5 c0ed873cd8 [release-branch.go1.20] cmd/go: disallow package directories containing newlines 356a419e2f [release-branch.go1.20] cmd/go: enforce flags with non-optional arguments fa60c381ed [release-branch.go1.20] cmd/go,cmd/cgo: in _cgo_flags use one line per flag 36144ba429 [release-branch.go1.20] runtime: implement SUID/SGID protections 5036ba77eb [release-branch.go1.20] net: skip TestFileFdBlocks if the "unix" network is not supported b249ec5655 [release-branch.go1.20] cmd/go/internal: update documentation of go test and go generate 4b95fc1e6c [release-branch.go1.20] cmd/go: save checksums for go.mod files needed for go version lines 31a1e19a59 [release-branch.go1.20] net, os: net.Conn.File.Fd should return a blocking descriptor 450c8021a5 [release-branch.go1.20] runtime: change fcntl to return two values 22741120ee [release-branch.go1.20] runtime: consistently define fcntl 9270e3be8f [release-branch.go1.20] os: if descriptor is non-blocking, retain that in Fd method 600636e931 [release-branch.go1.20] crypto/rsa: use BoringCrypto for 4096 bit keys afbe101950 [release-branch.go1.20] cmd/compile: fix bswap/load rewrite rules (From OE-Core rev: 1234971eea7b07e89efaf20055ba9580fbe2cb08) Signed-off-by: Sakib Sajal Signed-off-by: Richard Purdie (cherry picked from commit 3ea1e9e9d7385c78bdd513e44cea5c36444529b2) Signed-off-by: Sakib Sajal Signed-off-by: Steve Sakoman

go: Use -no-pie to build target cgo

2023-06-14T14:14:25+00:00

Fixes go: ELF binary /usr/lib/go/pkg/tool/linux_arm64/pprof has relocations in .text go: ELF binary /usr/lib/go/bin/go has relocations in .text [textrel] (From OE-Core rev: 0e9f47eddf786972b409088629d0f62c6bc74448) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie (cherry picked from commit a27d39aebd5966ffffb57c20518381cb06ba8373) Signed-off-by: Sakib Sajal Signed-off-by: Steve Sakoman

go: Upgrade 1.20.1 -> 1.20.4

2023-06-14T14:14:25+00:00

- Remove already upstreamed patches - Brings a list of changes [1] [2] [3] [1] https://github.com/golang/go/issues?q=milestone%3AGo1.20.2+label%3ACherryPickApproved [2] https://github.com/golang/go/issues?q=milestone%3AGo1.20.3+label%3ACherryPickApproved [3] https://github.com/golang/go/issues?q=milestone%3AGo1.20.4+label%3ACherryPickApproved (From OE-Core rev: 5847869334dd6687441708e26d1c0ab0a648e7f5) Signed-off-by: Khem Raj Signed-off-by: Richard Purdie (cherry picked from commit e043bfb42156c59c93c6a4816528a63cfdaccc3e) Signed-off-by: Sakib Sajal Signed-off-by: Steve Sakoman

go: backport fix for CVE-2023-24537

2023-04-22T10:05:21+00:00

(From OE-Core rev: 6b5a3cc1c8c5c6591fb02612869e6725c010ca13) Signed-off-by: Ross Burton Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

go: fix CVE-2023-2453

2023-03-28T21:28:45+00:00

Backport a security fix, can be removed once we have 1.20.2 onwards. (From OE-Core rev: 06df8350c3bc6f56013a0bff20b64cfdbb81cfca) Signed-off-by: Ross Burton Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

go: fix some linkshared regression introduced in go 1.20

2023-03-23T22:36:46+00:00

Since go 1.20 some packages fails to link [1][2] and only build staticaly with GO_LINKSHARED = "" [1] https://lists.yoctoproject.org/g/meta-virtualization/topic/97182310 [2] https://github.com/golang/go/issues/58966 (From OE-Core rev: eb40d6c2ef72814336365208722e2dc96322e07d) Signed-off-by: Jose Quaresma Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

go: use go as CVE product for all golang recipe veriants

2023-03-14T17:10:00+00:00

All golang vulnerabilities are reported under product 'go'. By default there is no vulnerability reported for images with golang components because none of used golang packages have correct CVE product set: * go-binary-native * go-runtime * go-cross-* (From OE-Core rev: 09f3a27a809bbec9b08c4e4a2b846b68f386c35c) Signed-off-by: Peter Marko Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

go: update 1.20 -> 1.20.1

2023-02-20T15:18:30+00:00

(From OE-Core rev: 257d508268719bd90ed81b61a04b756ba78ec1bd) Signed-off-by: Alexander Kanavin Signed-off-by: Alexandre Belloni Signed-off-by: Richard Purdie

go-cross-canadian: use gcc-crosssdk, not gcc-native

2023-02-15T10:21:34+00:00

The recipe was building native go against build host headers and libraries, and then installing it as a nativesdk item, which is entirely incorrect. This has been working by coincidence (go generally uses C and C libraries lightly) but with go 1.20 this turned into hard breakage. Also nativesdk sysroot was being passed in incorrectly. (From OE-Core rev: 9212704a0e6ba79c3a3c4d85fc132e0ab6de1747) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie

go: update 1.19.4 -> 1.20

2023-02-15T10:21:34+00:00

No longer package go-runtime-staticdev into sdk packagegroup, as go-runtime 1.20 doesn't build the static bits anymore (possibly can be enabled via build config, if proven necessary). (From OE-Core rev: e8ab9d303a6fca3806097f1fd360efe8f8ae0c1d) Signed-off-by: Alexander Kanavin Signed-off-by: Luca Ceresoli Signed-off-by: Richard Purdie