cilium · mtardy · Dec 8, 2025 · Dec 5, 2025
diff --git a/.github/workflows/bpf-unit-tests.yml b/.github/workflows/bpf-unit-tests.yml
@@ -24,7 +24,7 @@ jobs:
       uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.24.10'
+        go-version: '1.24.11'
 
     - name: Install LLVM
       run: |

diff --git a/.github/workflows/build-clang-image.yaml b/.github/workflows/build-clang-image.yaml
@@ -121,7 +121,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.24.10'
+          go-version: '1.24.11'
 
       - name: Install Bom
         shell: bash

diff --git a/.github/workflows/build-images-ci.yml b/.github/workflows/build-images-ci.yml
@@ -70,7 +70,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.24.10'
+          go-version: '1.24.11'
 
       # Warning: this must run before checking out the untrusted code
       - name: Get version

diff --git a/.github/workflows/build-images-releases.yml b/.github/workflows/build-images-releases.yml
@@ -91,7 +91,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.24.10'
+          go-version: '1.24.11'
 
       - name: Install Bom
         if: ${{ startsWith(steps.tag.outputs.tag, 'v') }}

diff --git a/.github/workflows/build-rthooks-images-releases.yml b/.github/workflows/build-rthooks-images-releases.yml
@@ -81,7 +81,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.24.10'
+          go-version: '1.24.11'
 
       - name: Install Bom
         if: ${{ startsWith(steps.tag.outputs.tag, 'v') }}

diff --git a/.github/workflows/generated-docs.yaml b/.github/workflows/generated-docs.yaml
@@ -41,7 +41,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: "1.24.10"
+          go-version: "1.24.11"
       - name: Go version
         run: go version
       - name: Check Tetragon daemon flags

diff --git a/.github/workflows/gotests.yml b/.github/workflows/gotests.yml
@@ -26,7 +26,7 @@ jobs:
       uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.24.10'
+        go-version: '1.24.11'
 
     - name: Install dependencies
       run: |

diff --git a/.github/workflows/lint-codeql.yml b/.github/workflows/lint-codeql.yml
@@ -58,7 +58,7 @@ jobs:
       uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.24.10'
+        go-version: '1.24.11'
     - name: Initialize CodeQL
       uses: github/codeql-action/init@9e8d0789d4a0fa9ceb6b1738f7e269594bdd67f0 # v3.28.9
       with:

diff --git a/.github/workflows/lint-k8s.yaml b/.github/workflows/lint-k8s.yaml
@@ -23,7 +23,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: "1.24.10"
+          go-version: "1.24.11"
       - name: Go version
         run: go version
       - name: Validate that generated files are up to date.

diff --git a/.github/workflows/lint-proto.yaml b/.github/workflows/lint-proto.yaml
@@ -41,7 +41,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: "1.24.10"
+          go-version: "1.24.11"
       - name: Go version
         run: go version
       - name: Validate that generated files are up to date.

diff --git a/.github/workflows/podinfo-test.yaml b/.github/workflows/podinfo-test.yaml
@@ -39,7 +39,7 @@ jobs:
       uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.24.10'
+        go-version: '1.24.11'
 
     - name: Install Kind and create cluster
       uses: helm/kind-action@a1b0e391336a6ee6713a0583f8c6240d70863de3 # v1.12.0

diff --git a/.github/workflows/run-e2e-tests.yaml b/.github/workflows/run-e2e-tests.yaml
@@ -86,7 +86,7 @@ jobs:
       uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.24.10'
+        go-version: '1.24.11'
 
     - name: Install kubectl, kind and cilium CLI
       uses: alexellis/arkade-get@master

diff --git a/.github/workflows/static-checks.yaml b/.github/workflows/static-checks.yaml
@@ -34,7 +34,7 @@ jobs:
       uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.24.10'
+        go-version: '1.24.11'
 
     - name: Check if build works for every commit
       run: |
@@ -69,7 +69,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.24.10'
+          go-version: '1.24.11'
           # using golangci-lint cache instead
           cache: false
 
@@ -90,7 +90,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.24.10'
+          go-version: '1.24.11'
 
       - name: Check gofmt formatting
         run: |
@@ -119,7 +119,7 @@ jobs:
         uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
         with:
           # renovate: datasource=golang-version depName=go
-          go-version: '1.24.10'
+          go-version: '1.24.11'
 
       - name: Check module vendoring
         run: |

diff --git a/.github/workflows/tetragon-rthook-pr.yaml b/.github/workflows/tetragon-rthook-pr.yaml
@@ -27,7 +27,7 @@ jobs:
       uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.24.10'
+        go-version: '1.24.11'
 
     - name: Build
       env:

diff --git a/.github/workflows/vmtests.yml b/.github/workflows/vmtests.yml
@@ -27,7 +27,7 @@ jobs:
       uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
       with:
         # renovate: datasource=golang-version depName=go
-        go-version: '1.24.10'
+        go-version: '1.24.11'
 
     - name: Install build dependencies
       run: |

diff --git a/Dockerfile b/Dockerfile
@@ -18,14 +18,14 @@ ARG TARGETARCH
 RUN make tetragon-bpf LOCAL_CLANG=1 TARGET_ARCH=$TARGETARCH
 
 # Second builder (cross-)compile tetragon and tetra
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.24.10@sha256:f62e2c4a5ff5a8a093642baf32c39f8239a507bec35da33d7ccf17cf3cf29fc2 AS tetragon-builder
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.24.11@sha256:cf1272dbf972a94f39a81dcb9dc243a8d2f981e5dd3b5a5c965f6d9ab9268b26 AS tetragon-builder
 WORKDIR /go/src/github.com/cilium/tetragon
 ARG TETRAGON_VERSION TARGETARCH
 COPY . .
 RUN make VERSION=$TETRAGON_VERSION TARGET_ARCH=$TARGETARCH tetragon tetra tetragon-oci-hook tetragon-oci-hook-setup
 
 # Third builder (cross-)compile a stripped gops
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.24.10-alpine@sha256:12c199a889439928e36df7b4c5031c18bfdad0d33cdeae5dd35b2de369b5fbf5 AS gops
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.24.11-alpine@sha256:06545cc1ff10ddf04aebe20db1352ec7c96d1e43135767931c473557d0378202 AS gops
 ARG TARGETARCH
 RUN apk add --no-cache git \
 # renovate: datasource=github-releases depName=google/gops

diff --git a/Dockerfile.dev b/Dockerfile.dev
@@ -9,7 +9,7 @@ FROM quay.io/cilium/cilium-bpftool@sha256:1832b32d118e7006ea2ce530b14ae5b28acd55
 COPY . ./
 
 
-FROM docker.io/library/golang:1.24.10@sha256:f62e2c4a5ff5a8a093642baf32c39f8239a507bec35da33d7ccf17cf3cf29fc2
+FROM docker.io/library/golang:1.24.11@sha256:cf1272dbf972a94f39a81dcb9dc243a8d2f981e5dd3b5a5c965f6d9ab9268b26
 RUN apt-get update -y &&    \
     apt-get upgrade -y &&   \
     apt-get install -y      \

diff --git a/Dockerfile.operator b/Dockerfile.operator
@@ -2,7 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 ARG BASE_IMAGE=scratch
-ARG GOLANG_IMAGE=docker.io/library/golang:1.24.10@sha256:f62e2c4a5ff5a8a093642baf32c39f8239a507bec35da33d7ccf17cf3cf29fc2
+ARG GOLANG_IMAGE=docker.io/library/golang:1.24.11@sha256:cf1272dbf972a94f39a81dcb9dc243a8d2f981e5dd3b5a5c965f6d9ab9268b26
 ARG ALPINE_IMAGE=docker.io/library/alpine:3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
 
 # BUILDPLATFORM is an automatic platform ARG enabled by Docker BuildKit.

diff --git a/Dockerfile.rthooks b/Dockerfile.rthooks
@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: Apache-2.0
 
-ARG GOLANG_IMAGE=docker.io/library/golang:1.24.10@sha256:f62e2c4a5ff5a8a093642baf32c39f8239a507bec35da33d7ccf17cf3cf29fc2
+ARG GOLANG_IMAGE=docker.io/library/golang:1.24.11@sha256:cf1272dbf972a94f39a81dcb9dc243a8d2f981e5dd3b5a5c965f6d9ab9268b26
 ARG BASE_IMAGE=docker.io/library/alpine:3.22.2@sha256:4b7ce07002c69e8f3d704a9c5d6fd3053be500b7f1c69fc0d80990c2ad8dd412
 
 # BUILDPLATFORM is an automatic platform ARG enabled by Docker BuildKit.

diff --git a/Dockerfile.test b/Dockerfile.test
@@ -11,7 +11,7 @@ RUN apt-get install -y linux-libc-dev
 COPY . ./
 RUN make tetragon-bpf && pwd
 
-FROM docker.io/library/golang:1.24.10@sha256:f62e2c4a5ff5a8a093642baf32c39f8239a507bec35da33d7ccf17cf3cf29fc2
+FROM docker.io/library/golang:1.24.11@sha256:cf1272dbf972a94f39a81dcb9dc243a8d2f981e5dd3b5a5c965f6d9ab9268b26
 RUN apt-get update
 RUN apt-get install -y linux-libc-dev rpm2cpio cpio git flex bison autoconf libelf-dev bc netcat-traditional
 WORKDIR /go/src/github.com/cilium/tetragon

diff --git a/Makefile.cli b/Makefile.cli
@@ -3,7 +3,7 @@
 
 CLI_GO_BUILD = CGO_ENABLED=0 $(GO) build
 # renovate: datasource=docker
-GO_IMAGE = docker.io/library/golang:1.24.10-alpine@sha256:12c199a889439928e36df7b4c5031c18bfdad0d33cdeae5dd35b2de369b5fbf5
+GO_IMAGE = docker.io/library/golang:1.24.11-alpine@sha256:06545cc1ff10ddf04aebe20db1352ec7c96d1e43135767931c473557d0378202
 TARGET=tetra
 
 RELEASE_UID ?= $(shell id -u)

diff --git a/cmd/tetragon-metrics-docs/metricsmd/metricsmd.go b/cmd/tetragon-metrics-docs/metricsmd/metricsmd.go
@@ -23,7 +23,7 @@ func New(targets map[string]string, init initMetricsFunc) *cobra.Command {
 				{
 					Label: "version",
 					// renovate: datasource=golang-version
-					Values: []string{"go1.24.10"},
+					Values: []string{"go1.24.11"},
 				},
 			},
 		},
@@ -37,7 +37,7 @@ func New(targets map[string]string, init initMetricsFunc) *cobra.Command {
 				{
 					Label: "go_version",
 					// renovate: datasource=golang-version
-					Values: []string{"go1.24.10"},
+					Values: []string{"go1.24.11"},
 				},
 				{
 					Label:  "modified",

diff --git a/pkg/k8s/Makefile b/pkg/k8s/Makefile
@@ -1,5 +1,5 @@
 # renovate: datasource=docker
-BUILDER_IMAGE=docker.io/library/golang:1.24.10@sha256:f62e2c4a5ff5a8a093642baf32c39f8239a507bec35da33d7ccf17cf3cf29fc2
+BUILDER_IMAGE=docker.io/library/golang:1.24.11@sha256:cf1272dbf972a94f39a81dcb9dc243a8d2f981e5dd3b5a5c965f6d9ab9268b26
 GO ?= go
 
 all: generate