v1.2.5

Updates:

• Updates golang package golang-1-linux to 1.20.7

v1.2.4

What's Changed

• Update to golang 1.20.6 and vendor dependencies

Full Changelog: v1.2.3...v1.2.4

v1.2.3

Features

• Bumping to latest golang 1.20.5

Full Changelog: v1.2.2...v1.2.3

v1.2.2

Bug fixes

• Fix issue with file limits on Xenial and Bionic stemcells where it won't be set past 4096

Full Changelog: v1.2.1...v1.2.2

v1.2.1

Known Issues:

• #160, golang 1.20.4 has introduced behavior that is causing BPM to not properly configure the started process with the correctly configured file limits.

v1.2.0

Fixes/enhancements

• bpm will no longer constrain the size of /dev/shm and /dev to 64MB per container, and will rely on the OS's default size for these mount points.
  • For certain real-world workloads, this was causing containerized Postgresql workers to fail with ERROR: could not resize shared memory segment "/PostgreSQL.3671273430" to 33554432 bytes: No space left on device. For more information, consult the PR that introduced the change: #159

v1.1.23

Fixed CVEs:

• CVE-2022-41723: golang.org/x/net/http2: avoid quadratic complexity in HPACK decoding

v1.1.21

• CVE-2021-44716: golang: net/http: limit growth of header canonicalization cache
• CVE-2022-27664: golang: net/http: handle server errors after sending GOAWAY
• CVE-2022-32149: golang: golang.org/x/text/language: ParseAcceptLanguage takes a long time to parse complex tags

v1.1.20

Full Changelog: v1.1.19...v1.1.20

v1.1.19

Dependency Bumps

Full Changelog: v1.1.18...v1.1.19