diff --git a/dockerfiles/code-coverage-uploader/Dockerfile b/dockerfiles/code-coverage-uploader/Dockerfile index 5e41ac915..e32097a11 100644 --- a/dockerfiles/code-coverage-uploader/Dockerfile +++ b/dockerfiles/code-coverage-uploader/Dockerfile @@ -9,6 +9,6 @@ RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/* RUN curl -sfLo /tmp/codecov https://uploader.codecov.io/latest/linux/codecov RUN chmod +x /tmp/codecov -FROM golang:1.24.3 +FROM golang:1.24.4 RUN apt-get update -y && apt-get dist-upgrade -y COPY --from=builder /tmp/codecov /usr/local/bin/codecov diff --git a/dockerfiles/crane/Dockerfile b/dockerfiles/crane/Dockerfile index 8a3544b7a..716c27e13 100644 --- a/dockerfiles/crane/Dockerfile +++ b/dockerfiles/crane/Dockerfile @@ -4,7 +4,7 @@ FROM gcr.io/go-containerregistry/crane as crane FROM mikefarah/yq:4.45.4 AS yq -FROM golang:1.24.3 +FROM golang:1.24.4 COPY --from=yq /usr/bin/yq /usr/local/bin COPY --from=crane /ko-app/crane /usr/local/bin ENTRYPOINT ["bash"] diff --git a/dockerfiles/gh-cli/Dockerfile b/dockerfiles/gh-cli/Dockerfile index 2df0ed329..65f5a4f0d 100644 --- a/dockerfiles/gh-cli/Dockerfile +++ b/dockerfiles/gh-cli/Dockerfile @@ -11,5 +11,5 @@ RUN curl \ https://github.com/cli/cli/releases/download/v2.40.0/gh_2.40.0_linux_amd64.tar.gz \ && tar -C /tmp --strip-components=1 -xzvf /tmp/gh.tar.gz -FROM golang:1.24.3 +FROM golang:1.24.4 COPY --from=builder /tmp/bin/gh /usr/local/bin/gh diff --git a/dockerfiles/integration-test-runner-beta/Dockerfile b/dockerfiles/integration-test-runner-beta/Dockerfile index f60257eb2..0f0564a53 100644 --- a/dockerfiles/integration-test-runner-beta/Dockerfile +++ b/dockerfiles/integration-test-runner-beta/Dockerfile @@ -36,7 +36,7 @@ RUN google-chrome --version # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/ ENV PATH /usr/local/go/bin:$PATH -RUN curl -fsSL https://go.dev/dl/go1.24.3.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ +RUN curl -fsSL https://go.dev/dl/go1.24.4.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ tar -C /usr/local -xzf /tmp/go.tar.gz && \ rm /tmp/go.tar.gz && \ go version diff --git a/dockerfiles/integration-test-runner/Dockerfile b/dockerfiles/integration-test-runner/Dockerfile index 7fd89e924..303608f4f 100644 --- a/dockerfiles/integration-test-runner/Dockerfile +++ b/dockerfiles/integration-test-runner/Dockerfile @@ -36,7 +36,7 @@ RUN google-chrome --version # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/ ENV PATH /usr/local/go/bin:$PATH -RUN curl -fsSL https://go.dev/dl/go1.24.3.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ +RUN curl -fsSL https://go.dev/dl/go1.24.4.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ tar -C /usr/local -xzf /tmp/go.tar.gz && \ rm /tmp/go.tar.gz && \ go version diff --git a/dockerfiles/test-cfssl/Dockerfile b/dockerfiles/test-cfssl/Dockerfile index 8d2311f0f..cb454e703 100644 --- a/dockerfiles/test-cfssl/Dockerfile +++ b/dockerfiles/test-cfssl/Dockerfile @@ -11,7 +11,7 @@ FROM cfssl/cfssl:v1.6.5 as cfssl # We just need any basic unix with bash, but we can pick the same # base image that they use, just in case they did any dynamic linking. -FROM golang:1.24.3 +FROM golang:1.24.4 # Thier Docerfile https://github.com/cloudflare/cfssl/blob/master/Dockerfile # calls their Makefile https://github.com/cloudflare/cfssl/blob/master/Makefile diff --git a/pipelines/dockerfile-builders/pipeline.yml b/pipelines/dockerfile-builders/pipeline.yml index 0016ef22a..e72bcb0f3 100644 --- a/pipelines/dockerfile-builders/pipeline.yml +++ b/pipelines/dockerfile-builders/pipeline.yml @@ -38,7 +38,7 @@ meta: # These version numbers should be updated periodically. codegen-versions: &codegen-versions # Choose which version of Golang to use in the codegen container images. - BUILD_ARG_GO_VERSION: '1.24.3' + BUILD_ARG_GO_VERSION: '1.24.4' # Choose which version of sigs.k8s.io/controller-tools/cmd/controller-gen to install # in the codegen container images. BUILD_ARG_CONTROLLER_GEN_VERSION: 0.18.0 diff --git a/pipelines/pull-requests/pipeline.yml b/pipelines/pull-requests/pipeline.yml index 56c00b123..f3c917e16 100644 --- a/pipelines/pull-requests/pipeline.yml +++ b/pipelines/pull-requests/pipeline.yml @@ -585,7 +585,7 @@ jobs: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' inputs: - name: pinniped-pr outputs: diff --git a/pipelines/shared-helpers/test-binaries-image/Dockerfile b/pipelines/shared-helpers/test-binaries-image/Dockerfile index 7ee2c81f3..48852f643 100644 --- a/pipelines/shared-helpers/test-binaries-image/Dockerfile +++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile @@ -8,7 +8,7 @@ # test binaries built by this dockerfile are run in a container built by dockerfiles/integration-test-runner/Dockerfile # which uses google/cloud-sdk as the base image. Mismatching debian versions causes the pinniped-integration-test # built below to error upon execution complaining that the expected version of GLIBC is not found. -FROM golang:1.24.3-bullseye as build-env +FROM golang:1.24.4-bullseye as build-env WORKDIR /work COPY . . ARG GOPROXY diff --git a/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips b/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips index c4cd25a40..9e78c5c0d 100644 --- a/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips +++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips @@ -10,7 +10,7 @@ # test binaries built by this dockerfile are run in a container built by dockerfiles/integration-test-runner/Dockerfile # which uses google/cloud-sdk as the base image. Mismatching debian versions causes the pinniped-integration-test # built below to error upon execution complaining that the expected version of GLIBC is not found. -FROM golang:1.24.3-bullseye as build-env +FROM golang:1.24.4-bullseye as build-env WORKDIR /work COPY . . ARG GOPROXY diff --git a/pipelines/shared-tasks/build-cli-binaries/task.yml b/pipelines/shared-tasks/build-cli-binaries/task.yml index 475610aba..0f617d36b 100644 --- a/pipelines/shared-tasks/build-cli-binaries/task.yml +++ b/pipelines/shared-tasks/build-cli-binaries/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/confirm-built-with-fips/task.yml b/pipelines/shared-tasks/confirm-built-with-fips/task.yml index 1f85b8408..ba60d302d 100644 --- a/pipelines/shared-tasks/confirm-built-with-fips/task.yml +++ b/pipelines/shared-tasks/confirm-built-with-fips/task.yml @@ -10,6 +10,6 @@ image_resource: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' run: path: pinniped-ci/pipelines/shared-tasks/confirm-built-with-fips/task.sh diff --git a/pipelines/shared-tasks/confirm-version/task.yml b/pipelines/shared-tasks/confirm-version/task.yml index f33cee3ab..8d55e0101 100644 --- a/pipelines/shared-tasks/confirm-version/task.yml +++ b/pipelines/shared-tasks/confirm-version/task.yml @@ -10,7 +10,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' run: # Confirm that the correct git sha was baked into the executables and that they log the version as their # first line of output. Do this by directly running the server binary from the rootfs of the built image. diff --git a/pipelines/shared-tasks/run-go-vuln-scan/task.yml b/pipelines/shared-tasks/run-go-vuln-scan/task.yml index 89e9dd241..76204a29d 100644 --- a/pipelines/shared-tasks/run-go-vuln-scan/task.yml +++ b/pipelines/shared-tasks/run-go-vuln-scan/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-unit-tests/task.yml b/pipelines/shared-tasks/run-unit-tests/task.yml index 69e906d41..2b78bcf68 100644 --- a/pipelines/shared-tasks/run-unit-tests/task.yml +++ b/pipelines/shared-tasks/run-unit-tests/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-verify-go-generate/task.yml b/pipelines/shared-tasks/run-verify-go-generate/task.yml index 7626879b2..1109afeb4 100644 --- a/pipelines/shared-tasks/run-verify-go-generate/task.yml +++ b/pipelines/shared-tasks/run-verify-go-generate/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml b/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml index 07bc10c80..f0d05beab 100644 --- a/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml +++ b/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-verify-lint/task.yml b/pipelines/shared-tasks/run-verify-lint/task.yml index 39d456798..968102e4c 100644 --- a/pipelines/shared-tasks/run-verify-lint/task.yml +++ b/pipelines/shared-tasks/run-verify-lint/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/update-version-and-cli-docs/task.yml b/pipelines/shared-tasks/update-version-and-cli-docs/task.yml index 17e6ca896..98201785e 100644 --- a/pipelines/shared-tasks/update-version-and-cli-docs/task.yml +++ b/pipelines/shared-tasks/update-version-and-cli-docs/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.24.3' + tag: '1.24.4' inputs: - name: pinniped-ci - name: github-final-release