App Engine hasn't upgraded beyond Go 1.16, which is now out of security window

Sean Abraham

unread,

Sep 11, 2022, 9:33:18 PM9/11/22

to golang-nuts

I'm hoping a member of the Go team will take pity on me and prod the App Engine Go team about this. The most recent upgrade to AE's Go environment was in Nov 2021, when they started supporting Go 1.16 (see release notes below). Now that Go 1.19 is out, Go 1.16 won't be getting security fixes anymore, and App Engine Go users are in a frustrating place.

If this is App Engine's way of telling me to move to Cloud Run (-->Dockerizing), it'd be nice if they'd just tell us that :). Otherwise, could a Googler please help us AE users out and poke AE into getting up to 1.17, 1.18, or 1.19? I don't know where to file a bug straight against AE, and I figure the Go team should be very interested in this, due to aforementioned security implications.

https://cloud.google.com/appengine/docs/standard/go/release-notes

Thanks,

Sean

Rusco

unread,

Sep 12, 2022, 5:33:09 AM9/12/22

to golang-nuts

Googles own language on Googles own cloud lags behind several version, I don't understand this :-(

Microsoft seems to be more eager to keep things up to date:

.NET 7 comes to Azure Functions & Visual Studio 2022 - .NET Blog (microsoft.com)

Olivier Favre

unread,

Dec 15, 2022, 11:33:41 AM12/15/22

to golang-nuts

Hi,

I think App Engine is not getting as much development efforts as Cloud Run does.

I foresee it the same fate as Legacy Networks versus VPC.

That said, it looks like they were unconfortable with this situation as they released Go 1.18 and 1.19 (NB: not 1.17) a few days ago:

https://cloud.google.com/appengine/docs/standard/go/release-notes#December_07_2022

Cheers,

--

Olivier Favre

drc...@google.com

unread,

Dec 19, 2022, 1:39:55 PM12/19/22

to golang-nuts

I just checked with my personal app engine project ("gcloud app deploy", that's app engine, I think), and with 1.19 specified in go.mod and "runtime: 119" in app.yaml, the app reported runtime.Version() of 1.19.3. My understanding is this is a recent change.

Sean Abraham

unread,

Dec 19, 2022, 9:39:22 PM12/19/22

to drc...@google.com, golang-nuts

Thanks, folks! I just upgraded my app to the 119 runtime too, and it went very smoothly!

--
You received this message because you are subscribed to a topic in the Google Groups "golang-nuts" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/golang-nuts/OspOyUz7CBQ/unsubscribe.
To unsubscribe from this group and all its topics, send an email to golang-nuts...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/golang-nuts/5844eecc-9315-41a7-957e-39c6bd46a0bcn%40googlegroups.com.

--

Sean Abraham
seana...@gmail.com

Cell: 720-278-8211

ga...@zenbunker.ch

unread,

Dec 20, 2022, 1:04:27 PM12/20/22

to golang-nuts

Any updates on App Engine Flexible? It's still stuck on 1.15 and a pull request for 1.16 has been ignored for over a year https://github.com/GoogleCloudPlatform/golang-docker

Is App Engine Flexible being abandoned by Google? Where should I migrate our Go applications?