chore: update Go toolchain to 1.25.3 #1574

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft

akurinnoy wants to merge 2 commits into devfile:main from akurinnoy:update-golang-1.25

.ci/oci.Dockerfile

-Original file line number
+Diff line change
@@ Expand Up / @@ -13,7 +13,8 @@ @@
     # limitations under the License.
     #
-    FROM registry.ci.openshift.org/openshift/release:rhel-9-release-golang-1.24-openshift-4.20
+    # Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies
+    FROM registry.ci.openshift.org/openshift/release:rhel-9-release-golang-1.25-openshift-4.20@sha256:cd5c68457b9da02df266e32f9e26d9c323d808acaadc35126c50a526051c1d89
     SHELL ["/bin/bash", "-c"]
@@ Expand Down @@

.github/workflows/code-coverage.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -14,7 +14,7 @@ jobs: @@
           name: Set up Go 1.x
           uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
           with:
-            go-version: 1.24.6
+            go-version: 1.25.5
         -
           name: Set up Python 3.11
           uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0
@@ Expand Down @@

.github/workflows/pr.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -15,7 +15,7 @@ jobs: @@
           name: Set up Go 1.x
           uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
           with:
-            go-version: 1.24.6
+            go-version: 1.25.5
         -
           name: Set up Python 3.11
           uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0
@@ Expand Down @@

.github/workflows/release.yml

-Original file line number
+Diff line change
@@ Expand Up / @@ -32,7 +32,7 @@ jobs: @@
           - name: Set up Go 1.x
             uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
             with:
-              go-version: 1.23.6
+              go-version: 1.25.5
           - name: Set up QEMU
             uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 #v2.2.0
@@ Expand Down @@

CONTRIBUTING.md

-Original file line number
+Diff line change
@@ Expand Up @@
     To build, test and debug the DevWorkspace Operator the following development tools are required:
-    - go 1.16 or later
+    - go 1.25 or later
     - git
     - sed
     - jq
@@ Expand Down @@

build/Dockerfile

-Original file line number
+Diff line change
@@ Expand Up / @@ -15,7 +15,8 @@ @@
     # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset
     # Use BUILDPLATFORM to ensure the builder always runs natively on the host machine
-    FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.24.6-1758501173 AS builder
+    # Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies
+    FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 AS builder
     # Accept TARGETARCH and TARGETPLATFORM, which are automatically passed by the builder
     ARG TARGETARCH
@@ Expand Down @@

go.mod

            
                      Original file line number
                      Diff line number
                      Diff line change
                  
    @@ -1,8 +1,8 @@
  
    module github.com/devfile/devworkspace-operator

    go 1.24.0

    go 1.25.0

    toolchain go1.24.6

    toolchain go1.25.5

    require (

    	github.com/devfile/api/v2 v2.3.1-alpha.0.20250521155908-5c3d7b99d252

project-clone/Dockerfile

-Original file line number
+Diff line change
@@ Expand Up / @@ -15,7 +15,8 @@ @@
     # Build the manager binary
     # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset
-    FROM registry.access.redhat.com/ubi9/go-toolset:1.24.6-1758501173 as builder
+    # Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies
+    FROM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 as builder
     ARG TARGETARCH
     ARG TARGETOS
     ENV GOPATH=/go/
@@ Expand Down @@

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: update Go toolchain to 1.25.3 #1574

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!

chore: update Go toolchain to 1.25.3 #1574

Are you sure you want to change the base?

Uh oh!

chore: update Go toolchain to 1.25.3 #1574

Uh oh!

Uh oh!

Diff view

Diff view

There are no files selected for viewing

Uh oh!