Skip to content

Commit 184bf0f

Browse files
committed
chore(deps): bump go version to resolve CVEs
Signed-off-by: Michael Crenshaw <350466+crenshaw-dev@users.noreply.github.com>
1 parent 7ae7d2c commit 184bf0f

8 files changed

Lines changed: 17 additions & 16 deletions

File tree

.github/workflows/ci-build.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ on:
1414
env:
1515
# Golang version to use across CI steps
1616
# renovate: datasource=golang-version packageName=golang
17-
GOLANG_VERSION: '1.25.5'
17+
GOLANG_VERSION: '1.26.2'
1818

1919
concurrency:
2020
group: ${{ github.workflow }}-${{ github.ref }}

.github/workflows/image.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -86,7 +86,7 @@ jobs:
8686
with:
8787
# Note: cannot use env variables to set go-version (https://docs.github.com/en/actions/using-workflows/reusing-workflows#limitations)
8888
# renovate: datasource=golang-version packageName=golang
89-
go-version: 1.25.5
89+
go-version: 1.26.2
9090
platforms: ${{ needs.set-vars.outputs.platforms }}
9191
push: false
9292

@@ -103,7 +103,7 @@ jobs:
103103
ghcr_image_name: ${{ needs.set-vars.outputs.ghcr_image_name }}
104104
# Note: cannot use env variables to set go-version (https://docs.github.com/en/actions/using-workflows/reusing-workflows#limitations)
105105
# renovate: datasource=golang-version packageName=golang
106-
go-version: 1.25.5
106+
go-version: 1.26.2
107107
platforms: ${{ needs.set-vars.outputs.platforms }}
108108
push: true
109109
secrets:

.github/workflows/release.yaml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ permissions: {}
1111

1212
env:
1313
# renovate: datasource=golang-version packageName=golang
14-
GOLANG_VERSION: '1.25.5' # Note: go-version must also be set in job argocd-image.with.go-version
14+
GOLANG_VERSION: '1.26.2' # Note: go-version must also be set in job argocd-image.with.go-version
1515

1616
jobs:
1717
argocd-image:
@@ -26,7 +26,7 @@ jobs:
2626
quay_image_name: ${{ needs.setup-variables.outputs.quay_image_name }}
2727
# Note: cannot use env variables to set go-version (https://docs.github.com/en/actions/using-workflows/reusing-workflows#limitations)
2828
# renovate: datasource=golang-version packageName=golang
29-
go-version: 1.25.5
29+
go-version: 1.26.2
3030
platforms: linux/amd64,linux/arm64,linux/s390x,linux/ppc64le
3131
push: true
3232
secrets:

.github/workflows/renovate.yaml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
2828
with:
2929
# renovate: datasource=golang-version packageName=golang
30-
go-version: 1.25.5
30+
go-version: 1.26.2
3131

3232
- name: Self-hosted Renovate
3333
uses: renovatebot/github-action@5712c6a41dea6cdf32c72d92a763bd417e6606aa #44.0.5

go.mod

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -165,7 +165,7 @@ require (
165165
github.com/clipperhouse/displaywidth v0.6.0 // indirect
166166
github.com/clipperhouse/stringish v0.1.1 // indirect
167167
github.com/clipperhouse/uax29/v2 v2.3.0 // indirect
168-
github.com/cloudflare/circl v1.6.1 // indirect
168+
github.com/cloudflare/circl v1.6.3 // indirect
169169
github.com/cpuguy83/go-md2man/v2 v2.0.6 // indirect
170170
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
171171
github.com/davidmz/go-pageant v1.0.2 // indirect
@@ -237,7 +237,7 @@ require (
237237
github.com/mitchellh/go-wordwrap v1.0.1 // indirect
238238
github.com/mitchellh/mapstructure v1.5.0 // indirect
239239
github.com/mitchellh/reflectwalk v1.0.2 // indirect
240-
github.com/moby/spdystream v0.5.0 // indirect
240+
github.com/moby/spdystream v0.5.1 // indirect
241241
github.com/moby/term v0.5.2 // indirect
242242
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
243243
github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee // indirect
@@ -281,7 +281,7 @@ require (
281281
go.yaml.in/yaml/v2 v2.4.2 // indirect
282282
go.yaml.in/yaml/v3 v3.0.4 // indirect
283283
golang.org/x/mod v0.30.0 // indirect
284-
golang.org/x/sys v0.40.0 // indirect
284+
golang.org/x/sys v0.42.0 // indirect
285285
golang.org/x/text v0.32.0 // indirect
286286
golang.org/x/tools v0.39.0 // indirect
287287
golang.org/x/tools/go/expect v0.1.1-deprecated // indirect

go.sum

Lines changed: 6 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -210,8 +210,8 @@ github.com/clipperhouse/stringish v0.1.1 h1:+NSqMOr3GR6k1FdRhhnXrLfztGzuG+VuFDfa
210210
github.com/clipperhouse/stringish v0.1.1/go.mod h1:v/WhFtE1q0ovMta2+m+UbpZ+2/HEXNWYXQgCt4hdOzA=
211211
github.com/clipperhouse/uax29/v2 v2.3.0 h1:SNdx9DVUqMoBuBoW3iLOj4FQv3dN5mDtuqwuhIGpJy4=
212212
github.com/clipperhouse/uax29/v2 v2.3.0/go.mod h1:Wn1g7MK6OoeDT0vL+Q0SQLDz/KpfsVRgg6W7ihQeh4g=
213-
github.com/cloudflare/circl v1.6.1 h1:zqIqSPIndyBh1bjLVVDHMPpVKqp8Su/V+6MeDzzQBQ0=
214-
github.com/cloudflare/circl v1.6.1/go.mod h1:uddAzsPgqdMAYatqJ0lsjX1oECcQLIlRpzZh3pJrofs=
213+
github.com/cloudflare/circl v1.6.3 h1:9GPOhQGF9MCYUeXyMYlqTR6a5gTrgR/fBLXvUgtVcg8=
214+
github.com/cloudflare/circl v1.6.3/go.mod h1:2eXP6Qfat4O/Yhh8BznvKnJ+uzEoTQ6jVKJRn81BiS4=
215215
github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc=
216216
github.com/codegangsta/inject v0.0.0-20150114235600-33e0aa1cb7c0/go.mod h1:4Zcjuz89kmFXt9morQgcfYZAYZ5n8WHjt81YYWIwtTM=
217217
github.com/codeskyblue/go-sh v0.0.0-20190412065543-76bd3d59ff27/go.mod h1:VQx0hjo2oUeQkQUET7wRwradO6f+fN5jzXgB/zROxxE=
@@ -674,8 +674,9 @@ github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyua
674674
github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo=
675675
github.com/mitchellh/reflectwalk v1.0.2 h1:G2LzWKi524PWgd3mLHV8Y5k7s6XUvT0Gef6zxSIeXaQ=
676676
github.com/mitchellh/reflectwalk v1.0.2/go.mod h1:mSTlrgnPZtwu0c4WaC2kGObEpuNDbx0jmZXqmk4esnw=
677-
github.com/moby/spdystream v0.5.0 h1:7r0J1Si3QO/kjRitvSLVVFUjxMEb/YLj6S9FF62JBCU=
678677
github.com/moby/spdystream v0.5.0/go.mod h1:xBAYlnt/ay+11ShkdFKNAG7LsyK/tmNBVvVOwrfMgdI=
678+
github.com/moby/spdystream v0.5.1 h1:9sNYeYZUcci9R6/w7KDaFWEWeV4LStVG78Mpyq/Zm/Y=
679+
github.com/moby/spdystream v0.5.1/go.mod h1:xBAYlnt/ay+11ShkdFKNAG7LsyK/tmNBVvVOwrfMgdI=
679680
github.com/moby/term v0.5.2 h1:6qk3FJAFDs6i/q3W/pQ97SX192qKfZgGjCQqfCJkgzQ=
680681
github.com/moby/term v0.5.2/go.mod h1:d3djjFCrjnB+fl8NJux+EJzu0msscUP+f8it8hPkFLc=
681682
github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
@@ -1222,8 +1223,8 @@ golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
12221223
golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
12231224
golang.org/x/sys v0.33.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
12241225
golang.org/x/sys v0.34.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=
1225-
golang.org/x/sys v0.40.0 h1:DBZZqJ2Rkml6QMQsZywtnjnnGvHza6BTfYFWY9kjEWQ=
1226-
golang.org/x/sys v0.40.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks=
1226+
golang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo=
1227+
golang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
12271228
golang.org/x/telemetry v0.0.0-20250710130107-8d8967aff50b/go.mod h1:4ZwOYna0/zsOKwuR5X/m0QFOJpSZvAxFfkQT+Erd9D4=
12281229
golang.org/x/term v0.0.0-20201117132131-f5c789dd3221/go.mod h1:Nr5EML6q2oocZ2LXRh80K7BxOlk5/8JxuGnuhpl+muw=
12291230
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=

test/container/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -8,7 +8,7 @@ RUN ln -s /usr/lib/$(uname -m)-linux-gnu /usr/lib/linux-gnu
88
# Please make sure to also check the contained yarn version and update the references below when upgrading this image's version
99
FROM docker.io/library/node:22.9.0@sha256:8398ea18b8b72817c84af283f72daed9629af2958c4f618fe6db4f453c5c9328 AS node
1010

11-
FROM docker.io/library/golang:1.25.1@sha256:d7098379b7da665ab25b99795465ec320b1ca9d4addb9f77409c4827dc904211 AS golang
11+
FROM docker.io/library/golang:1.26.2@sha256:1e598ea5752ae26c093b746fd73c5095af97d6f2d679c43e83e0eac484a33dc3 AS golang
1212

1313
FROM docker.io/library/registry:3.0@sha256:cd92709b4191c5779cd7215ccd695db6c54652e7a62843197e367427efb84d0e AS registry
1414

test/remote/Dockerfile

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
ARG BASE_IMAGE=docker.io/library/ubuntu:25.04@sha256:27771fb7b40a58237c98e8d3e6b9ecdd9289cec69a857fccfb85ff36294dac20
22

3-
FROM docker.io/library/golang:1.25.5@sha256:a22b2e6c5e753345b9759fba9e5c1731ebe28af506745e98f406cc85d50c828e AS go
3+
FROM docker.io/library/golang:1.26.2@sha256:1e598ea5752ae26c093b746fd73c5095af97d6f2d679c43e83e0eac484a33dc3 AS go
44

55
RUN go install github.com/mattn/goreman@latest && \
66
go install github.com/kisielk/godepgraph@latest

0 commit comments

Comments
 (0)