Prepare v1.3.6 release

Signed-off-by: Ryan Turner <[email protected]>
spiffe · Nov 1, 2022 · c04dba0 · c04dba0
1 parent 5bc9037
commit c04dba0
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 3 deletions.
diff --git a/.github/workflows/pr_build.yaml b/.github/workflows/pr_build.yaml
@@ -3,7 +3,7 @@ on:
   pull_request: {}
   workflow_dispatch: {}
 env:
-  GO_VERSION: 1.18.6
+  GO_VERSION: 1.18.8
 permissions:
   contents: read
 

diff --git a/.github/workflows/release_build.yaml b/.github/workflows/release_build.yaml
@@ -4,7 +4,7 @@ on:
     tags:
       - 'v[0-9].[0-9]+.[0-9]+'
 env:
-  GO_VERSION: 1.18.6
+  GO_VERSION: 1.18.8
 jobs:
   cache-deps:
     name: cache-deps (linux)

diff --git a/.go-version b/.go-version
@@ -1 +1 @@
-1.18.6
+1.18.8
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,5 +1,10 @@
 # Changelog
 
+## [1.3.6] - 2022-11-01
+
+### Security
+- Updated to Go 1.18.8 to address CVE-2022-41716. This vulnerability only affects users configuring external Server or Agent plugins on Windows.
+
 ## [1.3.5] - 2022-10-04
 
 ### Security