diff --git a/dockerfiles/code-coverage-uploader/Dockerfile b/dockerfiles/code-coverage-uploader/Dockerfile index bba1f0286..63435213a 100644 --- a/dockerfiles/code-coverage-uploader/Dockerfile +++ b/dockerfiles/code-coverage-uploader/Dockerfile @@ -9,6 +9,6 @@ RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/* RUN curl -sfLo /tmp/codecov https://uploader.codecov.io/latest/linux/codecov RUN chmod +x /tmp/codecov -FROM golang:1.25.4 +FROM golang:1.25.5 RUN apt-get update -y && apt-get dist-upgrade -y COPY --from=builder /tmp/codecov /usr/local/bin/codecov diff --git a/dockerfiles/crane/Dockerfile b/dockerfiles/crane/Dockerfile index f0122d9b8..0f224347e 100644 --- a/dockerfiles/crane/Dockerfile +++ b/dockerfiles/crane/Dockerfile @@ -4,7 +4,7 @@ FROM gcr.io/go-containerregistry/crane as crane FROM mikefarah/yq:4.49.2 AS yq -FROM golang:1.25.4 +FROM golang:1.25.5 COPY --from=yq /usr/bin/yq /usr/local/bin COPY --from=crane /ko-app/crane /usr/local/bin ENTRYPOINT ["bash"] diff --git a/dockerfiles/gh-cli/Dockerfile b/dockerfiles/gh-cli/Dockerfile index a388101ed..296848ae4 100644 --- a/dockerfiles/gh-cli/Dockerfile +++ b/dockerfiles/gh-cli/Dockerfile @@ -11,5 +11,5 @@ RUN curl \ https://github.com/cli/cli/releases/download/v2.40.0/gh_2.40.0_linux_amd64.tar.gz \ && tar -C /tmp --strip-components=1 -xzvf /tmp/gh.tar.gz -FROM golang:1.25.4 +FROM golang:1.25.5 COPY --from=builder /tmp/bin/gh /usr/local/bin/gh diff --git a/dockerfiles/integration-test-runner-beta/Dockerfile b/dockerfiles/integration-test-runner-beta/Dockerfile index b87b849e3..0b05c61f1 100644 --- a/dockerfiles/integration-test-runner-beta/Dockerfile +++ b/dockerfiles/integration-test-runner-beta/Dockerfile @@ -36,7 +36,7 @@ RUN google-chrome --version # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/ ENV PATH /usr/local/go/bin:$PATH -RUN curl -fsSL https://go.dev/dl/go1.25.3.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ +RUN curl -fsSL https://go.dev/dl/go1.25.5.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ tar -C /usr/local -xzf /tmp/go.tar.gz && \ rm /tmp/go.tar.gz && \ go version diff --git a/dockerfiles/integration-test-runner/Dockerfile b/dockerfiles/integration-test-runner/Dockerfile index d07bef660..baef17056 100644 --- a/dockerfiles/integration-test-runner/Dockerfile +++ b/dockerfiles/integration-test-runner/Dockerfile @@ -36,7 +36,7 @@ RUN google-chrome --version # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/ ENV PATH /usr/local/go/bin:$PATH -RUN curl -fsSL https://go.dev/dl/go1.25.3.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ +RUN curl -fsSL https://go.dev/dl/go1.25.5.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ tar -C /usr/local -xzf /tmp/go.tar.gz && \ rm /tmp/go.tar.gz && \ go version diff --git a/dockerfiles/test-cfssl/Dockerfile b/dockerfiles/test-cfssl/Dockerfile index eb570c473..5f38d6d96 100644 --- a/dockerfiles/test-cfssl/Dockerfile +++ b/dockerfiles/test-cfssl/Dockerfile @@ -11,7 +11,7 @@ FROM cfssl/cfssl:v1.6.5 as cfssl # We just need any basic unix with bash, but we can pick the same # base image that they use, just in case they did any dynamic linking. -FROM golang:1.25.4 +FROM golang:1.25.5 # Thier Docerfile https://github.com/cloudflare/cfssl/blob/master/Dockerfile # calls their Makefile https://github.com/cloudflare/cfssl/blob/master/Makefile diff --git a/pipelines/dockerfile-builders/pipeline.yml b/pipelines/dockerfile-builders/pipeline.yml index 760f90651..d1e661998 100644 --- a/pipelines/dockerfile-builders/pipeline.yml +++ b/pipelines/dockerfile-builders/pipeline.yml @@ -38,7 +38,7 @@ meta: # These version numbers should be updated periodically. codegen-versions: &codegen-versions # Choose which version of Golang to use in the codegen container images. - BUILD_ARG_GO_VERSION: '1.25.3' + BUILD_ARG_GO_VERSION: '1.25.5' # Choose which version of sigs.k8s.io/controller-tools/cmd/controller-gen to install # in the codegen container images. BUILD_ARG_CONTROLLER_GEN_VERSION: 0.19.0 diff --git a/pipelines/pull-requests/pipeline.yml b/pipelines/pull-requests/pipeline.yml index 17e986d7e..a242c257d 100644 --- a/pipelines/pull-requests/pipeline.yml +++ b/pipelines/pull-requests/pipeline.yml @@ -606,7 +606,7 @@ jobs: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' inputs: - name: pinniped-pr outputs: diff --git a/pipelines/shared-helpers/test-binaries-image/Dockerfile b/pipelines/shared-helpers/test-binaries-image/Dockerfile index 71d64950d..268aae5f3 100644 --- a/pipelines/shared-helpers/test-binaries-image/Dockerfile +++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile @@ -3,7 +3,7 @@ # Copyright 2020-2025 the Pinniped contributors. All Rights Reserved. # SPDX-License-Identifier: Apache-2.0 -FROM golang:1.25.4-bookworm as build-env +FROM golang:1.25.5-bookworm as build-env WORKDIR /work COPY . . ARG GOPROXY diff --git a/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips b/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips index c0e3c4ae9..e65d1585a 100644 --- a/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips +++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips @@ -6,7 +6,7 @@ # we need a separate dockerfile for the fips test image so that the integration tests # use the right ciphers etc. -FROM golang:1.25.4-bookworm as build-env +FROM golang:1.25.5-bookworm as build-env WORKDIR /work COPY . . ARG GOPROXY diff --git a/pipelines/shared-tasks/build-cli-binaries/task.yml b/pipelines/shared-tasks/build-cli-binaries/task.yml index be8cbe368..31f53554f 100644 --- a/pipelines/shared-tasks/build-cli-binaries/task.yml +++ b/pipelines/shared-tasks/build-cli-binaries/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/confirm-built-with-fips/task.yml b/pipelines/shared-tasks/confirm-built-with-fips/task.yml index 72177d2fd..563eafc17 100644 --- a/pipelines/shared-tasks/confirm-built-with-fips/task.yml +++ b/pipelines/shared-tasks/confirm-built-with-fips/task.yml @@ -10,6 +10,6 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' run: path: pinniped-ci/pipelines/shared-tasks/confirm-built-with-fips/task.sh diff --git a/pipelines/shared-tasks/confirm-version/task.yml b/pipelines/shared-tasks/confirm-version/task.yml index 42dbc4af4..87bed73de 100644 --- a/pipelines/shared-tasks/confirm-version/task.yml +++ b/pipelines/shared-tasks/confirm-version/task.yml @@ -10,7 +10,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' run: # Confirm that the correct git sha was baked into the executables and that they log the version as their # first line of output. Do this by directly running the server binary from the rootfs of the built image. diff --git a/pipelines/shared-tasks/format-release/task.yml b/pipelines/shared-tasks/format-release/task.yml index 985b1d3b7..e5666765e 100644 --- a/pipelines/shared-tasks/format-release/task.yml +++ b/pipelines/shared-tasks/format-release/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' inputs: - name: pinniped - name: release-semver diff --git a/pipelines/shared-tasks/run-go-vuln-scan/task.yml b/pipelines/shared-tasks/run-go-vuln-scan/task.yml index 7cff17438..764c4d5dd 100644 --- a/pipelines/shared-tasks/run-go-vuln-scan/task.yml +++ b/pipelines/shared-tasks/run-go-vuln-scan/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-unit-tests/task.yml b/pipelines/shared-tasks/run-unit-tests/task.yml index a13cd31b4..f57ca7b9c 100644 --- a/pipelines/shared-tasks/run-unit-tests/task.yml +++ b/pipelines/shared-tasks/run-unit-tests/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-verify-go-generate/task.yml b/pipelines/shared-tasks/run-verify-go-generate/task.yml index 92195e590..35dd32cf0 100644 --- a/pipelines/shared-tasks/run-verify-go-generate/task.yml +++ b/pipelines/shared-tasks/run-verify-go-generate/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml b/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml index 2c89879ed..aa193e3c9 100644 --- a/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml +++ b/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-verify-lint/task.yml b/pipelines/shared-tasks/run-verify-lint/task.yml index 91b17e994..9050106a4 100644 --- a/pipelines/shared-tasks/run-verify-lint/task.yml +++ b/pipelines/shared-tasks/run-verify-lint/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/update-version-and-cli-docs/task.yml b/pipelines/shared-tasks/update-version-and-cli-docs/task.yml index df5f68a3c..21e2fbfd6 100644 --- a/pipelines/shared-tasks/update-version-and-cli-docs/task.yml +++ b/pipelines/shared-tasks/update-version-and-cli-docs/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.3' + tag: '1.25.5' inputs: - name: pinniped-ci - name: github-final-release