forked from ethereum/go-ethereum
-
Notifications
You must be signed in to change notification settings - Fork 5
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge tag 'v1.4.15' into release/bsc-1.x-fh2.5
Via commit 'ec318b9c9789eb91904b9c6fbc5e3a91c64e3d21' due to tag conflicts. # Conflicts: # .github/workflows/pre-release.yml # .github/workflows/release.yml # CHANGELOG.md # README.md # params/version.go
- Loading branch information
Showing
39 changed files
with
1,069 additions
and
188 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,186 @@ | ||
| name: Pre Release | ||
|
|
||
| on: | ||
| push: | ||
| # Publish `pre-v1.2.3` tags as releases. | ||
| tags: | ||
| - 'pre-*' | ||
|
|
||
| env: | ||
| CGO_CFLAGS: "-O -D__BLST_PORTABLE__" | ||
| CGO_CFLAGS_ALLOW: "-O -D__BLST_PORTABLE__" | ||
|
|
||
| jobs: | ||
| build: | ||
| name: Build Release | ||
| strategy: | ||
| matrix: | ||
| go-version: [1.21.x] | ||
| os: [ubuntu-latest, macos-latest, windows-latest] | ||
| runs-on: ${{ matrix.os }} | ||
| steps: | ||
| - name: Checkout Code | ||
| uses: actions/checkout@v3 | ||
|
|
||
| - name: Install Go | ||
| uses: actions/setup-go@v3 | ||
| with: | ||
| go-version: ${{ matrix.go-version }} | ||
|
|
||
| - uses: actions/cache@v3 | ||
| with: | ||
| # In order: | ||
| # * Module download cache | ||
| # * Build cache (Linux) | ||
| # * Build cache (Mac) | ||
| # * Build cache (Windows) | ||
| path: | | ||
| ~/go/pkg/mod | ||
| ~/.cache/go-build | ||
| ~/Library/Caches/go-build | ||
| ~\AppData\Local\go-build | ||
| key: ${{ runner.os }}-go-${{ hashFiles('**/go.sum') }} | ||
| restore-keys: | | ||
| ${{ runner.os }}-go- | ||
| # ============================== | ||
| # Linux/Macos/Windows Build | ||
| # ============================== | ||
|
|
||
| - name: Build Binary for ${{matrix.os}} | ||
| if: matrix.os == 'ubuntu-latest' | ||
| run: | | ||
| go mod download | ||
| wget https://musl.cc/x86_64-linux-musl-cross.tgz | ||
| tar -xvf ./x86_64-linux-musl-cross.tgz | ||
| GIT_COMMIT=$(git rev-parse HEAD) | ||
| GIT_COMMIT_DATE=$(git log -n1 --pretty='format:%cd' --date=format:'%Y%m%d') | ||
| GOOS=linux GOARCH=amd64 CGO_ENABLED=1 CC=$(pwd)/x86_64-linux-musl-cross/bin/x86_64-linux-musl-gcc go build -ldflags "-X main.gitCommit=$GIT_COMMIT -X main.gitDate=$GIT_COMMIT_DATE -extldflags=-static" -o ./build/bin/geth -a ./cmd/geth | ||
| - name: Build Binary for ${{matrix.os}} | ||
| if: matrix.os != 'ubuntu-latest' | ||
| run: | | ||
| go mod download | ||
| make geth | ||
| # ============================== | ||
| # Cross Compile for ARM | ||
| # ============================== | ||
|
|
||
| - name: Build Binary for ARM | ||
| if: matrix.os == 'ubuntu-latest' | ||
| run: | | ||
| go mod download | ||
| wget https://musl.cc/aarch64-linux-musl-cross.tgz | ||
| tar -xvf ./aarch64-linux-musl-cross.tgz | ||
| GIT_COMMIT=$(git rev-parse HEAD) | ||
| GIT_COMMIT_DATE=$(git log -n1 --pretty='format:%cd' --date=format:'%Y%m%d') | ||
| GOOS=linux GOARCH=arm64 CGO_ENABLED=1 CC=$(pwd)/aarch64-linux-musl-cross/bin/aarch64-linux-musl-gcc go build -ldflags "-X main.gitCommit=$GIT_COMMIT -X main.gitDate=$GIT_COMMIT_DATE -extldflags=-static" -o ./build/bin/geth-linux-arm64 -a ./cmd/geth | ||
| # ============================== | ||
| # Upload artifacts | ||
| # ============================== | ||
|
|
||
| - name: Upload Linux Build | ||
| uses: actions/[email protected] | ||
| if: matrix.os == 'ubuntu-latest' | ||
| with: | ||
| name: linux | ||
| path: ./build/bin/geth | ||
|
|
||
| - name: Upload MacOS Build | ||
| uses: actions/[email protected] | ||
| if: matrix.os == 'macos-latest' | ||
| with: | ||
| name: macos | ||
| path: ./build/bin/geth | ||
|
|
||
| - name: Upload Windows Build | ||
| uses: actions/[email protected] | ||
| if: matrix.os == 'windows-latest' | ||
| with: | ||
| name: windows | ||
| path: ./build/bin/geth.exe | ||
|
|
||
| - name: Upload ARM-64 Build | ||
| uses: actions/[email protected] | ||
| if: matrix.os == 'ubuntu-latest' | ||
| with: | ||
| name: arm64 | ||
| path: ./build/bin/geth-linux-arm64 | ||
|
|
||
| release: | ||
| name: Release | ||
| needs: build | ||
| runs-on: ubuntu-latest | ||
| steps: | ||
| - name: Set Env | ||
| run: echo "RELEASE_VERSION=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV | ||
|
|
||
| - name: Checkout Code | ||
| uses: actions/checkout@v3 | ||
|
|
||
| # ============================== | ||
| # Download artifacts | ||
| # ============================== | ||
|
|
||
| - name: Download Artifacts | ||
| uses: actions/[email protected] | ||
| with: | ||
| name: linux | ||
| path: ./linux | ||
|
|
||
| - name: Download Artifacts | ||
| uses: actions/[email protected] | ||
| with: | ||
| name: macos | ||
| path: ./macos | ||
|
|
||
| - name: Download Artifacts | ||
| uses: actions/[email protected] | ||
| with: | ||
| name: windows | ||
| path: ./windows | ||
|
|
||
| - name: Download Artifacts | ||
| uses: actions/[email protected] | ||
| with: | ||
| name: arm64 | ||
| path: ./arm64 | ||
|
|
||
| - name: Download Config File | ||
| run: | | ||
| . ./.github/release.env | ||
| echo "mainnet.zip url: $MAINNET_FILE_URL" | ||
| echo "testnet.zip url: $TESTNET_FILE_URL" | ||
| curl -L $MAINNET_FILE_URL -o ./mainnet.zip | ||
| curl -L $TESTNET_FILE_URL -o ./testnet.zip | ||
| # ============================== | ||
| # Create release | ||
| # ============================== | ||
|
|
||
| # Rename assets | ||
| - run: | | ||
| mv ./linux/geth ./linux/geth_linux | ||
| mv ./macos/geth ./macos/geth_macos | ||
| mv ./windows/geth.exe ./windows/geth_windows.exe | ||
| - name: Create Release | ||
| uses: softprops/action-gh-release@v1 | ||
| env: | ||
| GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} # This token is provided by Actions, you do not need to create your own token | ||
| with: | ||
| tag_name: ${{ env.RELEASE_VERSION}} | ||
| release_name: ${{ env.RELEASE_VERSION}} | ||
| body: | | ||
| versing: ${{ env.RELEASE_VERSION}} | ||
| git commit: ${{ github.sha }} | ||
| draft: true | ||
| prerelease: true | ||
| files: | | ||
| ./mainnet.zip | ||
| ./testnet.zip | ||
| ./linux/geth_linux | ||
| ./macos/geth_macos | ||
| ./windows/geth_windows.exe | ||
| ./arm64/geth-linux-arm64 |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,2 +1,3 @@ | ||
| CVE-2024-34478 # "CWE-754: Improper Check for Unusual or Exceptional Conditions." This vulnerability is BTC only, BSC does not have the issue. | ||
| CVE-2024-6104 # "CWE-532: Information Exposure Through Log Files" This is caused by the vulnerabilities [email protected], it is only used in cmd devp2p, impact is limited. will upgrade to v0.7.7 later | ||
| CVE-2024-8421 # "CWE-400: Uncontrolled Resource Consumption (Resource Exhaustion)" This vulnerability is caused by issues in the golang.org/x/net package. Even the latest version(v0.29.0) has not yet addressed it, but we will continue to monitor updates closely. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.