Dependency update - Golang 1.22.7/1.23.1

[jeremyrickard]

Tracking info

Link to any previous tracking issue: #3723

Golang mailing list announcement: https://groups.google.com/g/golang-announce/c/vM0L-2IDlOU/m/R-gi-VMOBQAJ

SIG Release Slack thread: https://kubernetes.slack.com/archives/CJH2GBF7Y/p1725031141201539

Work items

• kube-cross, go-runner, releng-ci image updates: newer golang patch (1.22.7, 1.23.1) sep2024 #3758

  • kube-cross image promotion: Image promotion for build-image v1.32.0-go1.23.1-bullseye.0 / v1.31.0-go1.23.1-bullseye.0 / v1.31.0-go1.22.7-bullseye.0 / v1.30.0-go1.22.7-bullseye.0 / v1.29.0-go1.22.7-bullseye.0 / v1.28.0-go1.22.7-bullseye.0 k8s.io#7324
  • go-runner image promotion: Image promotion for build-image v2.3.1-go1.22.7-bookworm.0 / v2.3.1-go1.23.1-bookworm.0 k8s.io#7323
  • releng-ci image promotion: Image promotion for releng 1.22.7-bookworm-0 / 1.23.1-bookworm-0 k8s.io#7320

After go-runner image promotion

• distroless-iptables image update: bump distroless-iptables to use go 1.22.7/1.23.1 #3773

  • image promotion: Image promotion for build-image v0.5.8 / v0.6.3 k8s.io#7335

After kube-cross and distroless-iptables image promotions

• kubernetes/kubernetes update (master): https://github.com/kubernetes/kubernetes/pull/127611/files

  Ensure the following have been updated within the PR:

  • .go-version file
  • kube-cross image
  • go-runner image
  • distroless-iptables image
  • publishing bot rules
  • test image

Note
This update may require an update to go.sum files, for example: kubernetes/kubernetes#118507
This will require an API Review approval.

After kubernetes/kubernetes (master) has been updated

• k8s-cloud-builder and k8s-ci-builder image updates:

• kubekins/krte image variants update:

Cherry picks

• Kubernetes 1.y-1:
• Kubernetes 1.y-2:
• Kubernetes 1.y-3:

• publishing bot rule updates for active Golang versions:

After kubernetes/kubernetes (release branches) has been updated

• k8s-cloud-builder and k8s-ci-builder image updates:

• kubekins/krte image updates:

Follow-up items

• Ensure the Golang issue template is updated with any new requirements

/assign
cc: @kubernetes/release-engineering

[jeremyrickard]

Creating this in case we need to adopt this. Will update further once we see the CVEs.

[cpanato]

i can work on that @jeremyrickard if you want

[ameukam]

@jeremyrickard do we skip this for the patch releases ?

[haitch]

created PR #3758

[cpanato]

/assign @haitch as he is working on the bumps

[haitch]

3 image promotion PR:

• Image promotion for build-image v1.32.0-go1.23.1-bullseye.0 / v1.31.0-go1.23.1-bullseye.0 / v1.31.0-go1.22.7-bullseye.0 / v1.30.0-go1.22.7-bullseye.0 / v1.29.0-go1.22.7-bullseye.0 / v1.28.0-go1.22.7-bullseye.0 k8s.io#7324
• Image promotion for build-image v2.3.1-go1.22.7-bookworm.0 / v2.3.1-go1.23.1-bookworm.0 k8s.io#7323
• Image promotion for releng 1.22.7-bookworm-0 / 1.23.1-bookworm-0 k8s.io#7320

[haitch]

all 3 PR need ok-to-test label

[haitch]

#3773 for distroless-iptables image update

[haitch]

I don't understand why the bot close this issue, we still have quite some item pending, @jeremyrickard can you mark complete for

• distroless-iptable image promotion
• kubernetes/kubernetes update (master)

another thing I want to ask is shall we keep bump go 1.22.7 for kubernetes {1.28 to 1.31}, or shall we halt and start go 1.22.8 work stream?

[haitch]

we need to reactive this issue

[ameukam]

/reopen

[k8s-ci-robot]

@ameukam: Reopened this issue.

In response to this:

/reopen

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[justaugustus]

Superseded by #3778.
/close