Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

remove support for Go <= 1.14 #28

Merged
merged 6 commits into from
Jun 22, 2021
Merged

remove support for Go <= 1.14 #28

merged 6 commits into from
Jun 22, 2021

Conversation

amnonbc
Copy link
Contributor

@amnonbc amnonbc commented Jun 20, 2021

Go 1.14 and below are no longer supported by the toolchain and standard libraries and no longer provide security updates.

See #29

.travis.yml Outdated Show resolved Hide resolved
@oxisto
Copy link
Collaborator

oxisto commented Jun 20, 2021

If we decide to do this, I would suggest having a clear notice about this in the README, since we are currently not able to go the go.mod route. Can you include such a sentence or notice?

Probably it would also good to add a sentence or two in the version history that v3.2.1 will be the last release supporting Go 1.14 and below

Copy link
Collaborator

@oxisto oxisto left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Only minor things like spelling need to be change please, Could you also maybe drop a hint in the VERSION_HISTORY.md about the v3.2.1 being the last version that supports Go <= 1.14? Otherwise, I will do that in a follow-up commit.

Apart from that, let's see what others think @mfridman, @Waterdrips

As far as I could gather from the other conversation, @ripienaar was already in favour of this approach.

README.md Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
README.md Outdated Show resolved Hide resolved
.travis.yml Outdated Show resolved Hide resolved
@amnonbc amnonbc requested a review from oxisto June 21, 2021 21:20
@oxisto oxisto linked an issue Jun 22, 2021 that may be closed by this pull request
oxisto
oxisto previously approved these changes Jun 22, 2021
Copy link
Collaborator

@oxisto oxisto left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good so far, but I would really like the opinion of the rest of the team here, since this is a potentially "sensitive" issue.

ripienaar
ripienaar previously approved these changes Jun 22, 2021
README.md Outdated
So we will support a major version of Go until there are two newer major releases.
We no longer support building jwt-go with unsupported Go versions, as these contain security vulnerabilities
which will not be fixed.
This means that currently we support Go 1.15 and 1.16.

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We might drop the specific statement of 1.15 and 1.16 here else we end up having to always remember to update this - which we probably wont :)

Otherwise LGTM

mfridman
mfridman previously approved these changes Jun 22, 2021
Copy link
Member

@mfridman mfridman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Agree with this comment, just remove references to specific versions.

Otherwise, I don't see an issue dropping support for older versions. (probably for the best anyways)

@amnonbc amnonbc dismissed stale reviews from mfridman, ripienaar, and oxisto via e5eda23 June 22, 2021 16:40
Copy link
Member

@mfridman mfridman left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm. Thank you for your contribution.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Remove support for obsolete Go versions
4 participants