Merge pull request #55 from credativ/release/2.2.28

upgrade Go to 1.25.3, upgrade Alpine to 3.22.2

Author: cd-jbl

.github/workflows/release.yml

@@ -27,7 +27,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v3
         with:
-          go-version: 1.25.1
+          go-version: 1.25.3
 
       - name: Install package dependencies
         run: |

.github/workflows/unit-test.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v3
         with:
-          go-version: 1.25.1
+          go-version: 1.25.3
 
       - name: Install package dependencies
         run: |

CHANGELOG.md

@@ -1,3 +1,8 @@
+## 2.2.28 (2025-10-16)
+
+* Upgrade Go to 1.25.3
+* Upgrade Alpine to 3.22.2
+
 ## 2.2.27 (2025-09-25)
 
 * Upgrade Go to 1.25.1

cmd/docker-driver/Dockerfile

@@ -9,7 +9,7 @@ COPY . /src/vali
 WORKDIR /src/vali
 RUN make clean && make BUILD_IN_CONTAINER=false cmd/docker-driver/docker-driver
 
-FROM alpine:3.22.1
+FROM alpine:3.22.2
 RUN apk add --update --no-cache ca-certificates tzdata
 COPY --from=build /src/vali/cmd/docker-driver/docker-driver /bin/docker-driver
 WORKDIR /bin/

cmd/fluent-bit/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.25.1 as build
+FROM golang:1.25.3 as build
 COPY . /src/vali
 WORKDIR /src/vali
 RUN make clean && make BUILD_IN_CONTAINER=false fluent-bit-plugin

cmd/logcli/Dockerfile

@@ -1,11 +1,11 @@
-FROM golang:1.25.1 as build
+FROM golang:1.25.3 as build
 
 ARG TOUCH_PROTOS
 COPY . /src/vali
 WORKDIR /src/vali
 RUN make clean && (if [ "${TOUCH_PROTOS}" ]; then make touch-protos; fi) && make BUILD_IN_CONTAINER=false logcli
 
-FROM alpine:3.22.1
+FROM alpine:3.22.2
 
 RUN apk add --no-cache ca-certificates
 

cmd/migrate/Dockerfile

@@ -1,9 +1,9 @@
-FROM golang:1.25.1 as build
+FROM golang:1.25.3 as build
 COPY . /src/vali
 WORKDIR /src/vali
 RUN make clean && make BUILD_IN_CONTAINER=false migrate
 
-FROM alpine:3.22.1
+FROM alpine:3.22.2
 RUN apk add --update --no-cache ca-certificates
 COPY --from=build /src/vali/cmd/migrate/migrate /usr/bin/migrate
 #ENTRYPOINT [ "/usr/bin/migrate" ]

cmd/querytee/Dockerfile

@@ -1,11 +1,11 @@
-FROM golang:1.25.1 as build
+FROM golang:1.25.3 as build
 
 ARG TOUCH_PROTOS
 COPY . /src/vali
 WORKDIR /src/vali
 RUN make clean && make BUILD_IN_CONTAINER=false vali-querytee
 
-FROM alpine:3.22.1
+FROM alpine:3.22.2
 RUN apk add --update --no-cache ca-certificates
 COPY --from=build /src/vali/cmd/querytee/vali-querytee /usr/bin/querytee
 ENTRYPOINT [ "/usr/bin/querytee" ]

cmd/querytee/Dockerfile.cross

@@ -2,7 +2,7 @@ ARG BUILD_IMAGE=ghcr.io/credativ/vali-build-image:0.9.1
 # Directories in this file are referenced from the root of the project not this folder
 # This file is intended to be called from the root like so:
 # docker build -t ghcr.io/credativ/valitail -f cmd/valitail/Dockerfile .
-FROM golang:1.25.1-alpine as goenv
+FROM golang:1.25.3-alpine as goenv
 RUN go env GOARCH > /goarch && \
   go env GOARM > /goarm
 
@@ -12,7 +12,7 @@ COPY . /src/vali
 WORKDIR /src/vali
 RUN make clean && GOARCH=$(cat /goarch) GOARM=$(cat /goarm) make BUILD_IN_CONTAINER=false vali-querytee
 
-FROM alpine:3.22.1
+FROM alpine:3.22.2
 RUN apk add --update --no-cache ca-certificates
 COPY --from=build /src/vali/cmd/querytee/querytee /usr/bin/querytee
 ENTRYPOINT [ "/usr/bin/querytee" ]

cmd/vali-canary/Dockerfile

@@ -1,12 +1,12 @@
-FROM golang:1.25.1 as build
+FROM golang:1.25.3 as build
 # TOUCH_PROTOS signifies if we should touch the compiled proto files and thus not regenerate them.
 # This is helpful when file system timestamps can't be trusted with make
 ARG TOUCH_PROTOS
 COPY . /src/vali
 WORKDIR /src/vali
 RUN make clean && (if [ "${TOUCH_PROTOS}" ]; then make touch-protos; fi) && make BUILD_IN_CONTAINER=false vali-canary
 
-FROM alpine:3.22.1
+FROM alpine:3.22.2
 RUN apk add --update --no-cache ca-certificates
 COPY --from=build /src/vali/cmd/vali-canary/vali-canary /usr/bin/vali-canary
 ENTRYPOINT [ "/usr/bin/vali-canary" ]