General Golang Related Maintenance - January 2025

General Golang Related Maintenance - November 2025

This update addresses the following:

• gqlgen
• validator
• gocql
• go-redis
• xid
• afero
• testify
• swag
• gqlparser
• automaxprocs
• crypto

These changes are backend-facing and will not impact the user experience.

What's Changed

• [Chore] Package Upgrades Jan 2025. by @surahman in #78
• [Release] Package Upgrades Jan 2025. by @surahman in #79

Full Changelog: release_v1.7.6...release_v1.7.7

General Golang Related Maintenance - November 2024

General Golang Related Maintenance - November 2024

This update addresses the following:

• Bump the golang-jwt dependency due to CVEs.

These changes are backend-facing and will not impact the user experience.

What's Changed

• [Chore] General Golang Related Maintenance - November 2024 by @surahman in #76
• [Release] General Golang Related Maintenance - November 2024 by @surahman in #77

Full Changelog: release_v1.7.5...release_v1.7.6

General Golang Related Maintenance - August 2024

General Golang Related Maintenance - August 2024

This update addresses the following:

• Bump the dependency due to CVEs.
• Bump Go to v1.22.
• Bump CI runner Go to 1.22.
• Bump Docker builder container Go to v1.22.

These changes are backend-facing and will not impact the user experience.

I should finally stop getting the GH CVE digest for the deps now 🤞 .

What's Changed

• [Chore] General Golang Related Maintenance - August 2024 by @surahman in #74
• [Release] General Golang Related Maintenance - August 2024 by @surahman in #75

Full Changelog: release_v1.7.4...release_v1.7.5

golang.org/net/crypto Upgraded to Address Vulnerability.

golang.org/x/crypto Upgraded

The golang.org/x/crypto package had a vulnerability that needed to be addressed with a package upgrade.

What's Changed

• [Golang] [Hot Fix] updated golang.org/x/crypto due to vulnerabilities. by @surahman in #72
• [Release] Updated golang.org/x/crypto due to vulnerabilities. by @surahman in #73

Full Changelog: release_v1.7.3...release_v1.7.4

golang.org/net/x Upgraded to Address Vulnerabilities.

• golang.org/net/x upgraded to 0.17.0 to address CWE-400, CWE-79, and, CVE-2023-39325.
• The GHA CI Runner Golang version has been pegged to 1.20.

What's Changed

• [Golang] [Hot Fix] updated golang.org/x/net due to vulnerabilities. by @surahman in #70

Full Changelog: release_v1.7.2...release_v1.7.3

Gin Upgrade to v1.9.1 and JWT Refresh Bugfix.

• The Gin web framework has been upgraded to v1.9.1 due to CVE-2023-29401.
• A JWT refresh threshold bug has been addressed.

What's Changed

• [REST] Gin Web Framework Upgrade v1.9.1. by @surahman in #67
• [REST][GraphQL] JWT Refresh Threshold Logic Fix. by @surahman in #68

Full Changelog: release_v1.7.0...release_v1.7.2

Liquibase Migration Tooling and Redis Cluster Docker Container

• Liquibase migration tooling and scripts added.
• General codebase maintenance.
• Redis cluster Docker configuration simplified.
• Redis cluster node's canonical node names added.

What's Changed

• [Docker] Docker Compose for Redis Cluster simplified. by @surahman in #62
• [Go] Code Base Maintenance post Go v1.20 upgrade by @surahman in #63
• [Docker] Redis Cluster Canonical Names by @surahman in #64
• [Cassandra] Liquibase Migration Tooling Introduced by @surahman in #65

Full Changelog: release_v1.6.2...release_v1.7.0

Golang tooling upgraded to v1.20 and x/net library updated to v0.7.0

• Golang tooling has been upgraded to v1.20.
• x/nethas been upgraded to v0.7.0 to address CVEs:
  • CVE-2022-41723
  • CVE-2022-27664

What's Changed

• [Go] upgraded Golang tooling to 1.20 and x/net to 0.7.0 by @surahman in #60

Full Changelog: release_v1.6.1...release_v1.6.2

Bug Fix in Logger Configuration Loading

A bug has been addressed where an error was not returned if the base and encoder configuration type for the logger was not set to development or production.

What's Changed

• [Logger] Bugfix for Invalid Configuration Type. by @surahman in #58

Full Changelog: release_v1.6.0...release_v1.6.1

Container for Microservice

• Introduces a Docker container build script with resource detection optimizations for deployment to Kubernetes.
• Binary Exponential Backoff was implemented for retries when connecting to the Redis cluster.
• The number of retries when connecting to the Redis and Cassandra clusters is now configurable from the configuration files.
• A bug was addressed with port configurations and bindings for Redis in the Docker compose file.

What's Changed

• [Config] refactored config to common code. by @surahman in #52
• [Redis] Adding example config and environment variables. by @surahman in #53
• [Redis] [Cassandra] Connection Binary Exponential Backoff. by @surahman in #55
• [Docs] Schema Migration Details. by @surahman in #56
• [Docker] Build Container for Microservice Deployment. by @surahman in #54

Full Changelog: release_v1.5.0...release_v1.6.0