Merge pull request #237 from hashicorp/zalimeni/net-4904-bump-envoy-g…

…o-docker-1.0.x [NET-4904] security: update Envoy to 1.24.10
hashicorp · Aug 11, 2023 · d2493b7 · d2493b7
2 parents d415e20 + 8735e32
commit d2493b7
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 2 deletions.
diff --git a/.changelog/237.txt b/.changelog/237.txt
@@ -0,0 +1,3 @@
+```release-note:security
+Update to Go 1.20.7 and Envoy 1.24.10 within the Dockerfile.
+```
diff --git a/Dockerfile b/Dockerfile
@@ -6,11 +6,11 @@
 
 # envoy-binary pulls in the latest Envoy binary, as Envoy don't publish
 # prebuilt binaries in any other form.
-FROM envoyproxy/envoy-distroless:v1.24.7 as envoy-binary
+FROM envoyproxy/envoy-distroless:v1.24.10 as envoy-binary
 
 # go-discover builds the discover binary (which we don't currently publish
 # either).
-FROM golang:1.20.4-alpine as go-discover
+FROM golang:1.20.7-alpine as go-discover
 RUN CGO_ENABLED=0 go install github.com/hashicorp/go-discover/cmd/discover@214571b6a5309addf3db7775f4ee8cf4d264fd5f
 
 # Pull in dumb-init from alpine, as our distroless release image doesn't have a