Bump go to v1.25.1

dockerfiles/integration-test-runner-beta/Dockerfile

@@ -36,7 +36,7 @@ RUN google-chrome --version
 
 # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/
 ENV PATH /usr/local/go/bin:$PATH
-RUN curl -fsSL https://go.dev/dl/go1.25.0.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
+RUN curl -fsSL https://go.dev/dl/go1.25.1.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
     tar -C /usr/local -xzf /tmp/go.tar.gz && \
     rm /tmp/go.tar.gz && \
     go version

dockerfiles/integration-test-runner/Dockerfile

@@ -36,7 +36,7 @@ RUN google-chrome --version
 
 # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/
 ENV PATH /usr/local/go/bin:$PATH
-RUN curl -fsSL https://go.dev/dl/go1.25.0.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
+RUN curl -fsSL https://go.dev/dl/go1.25.1.linux-amd64.tar.gz -o /tmp/go.tar.gz && \
     tar -C /usr/local -xzf /tmp/go.tar.gz && \
     rm /tmp/go.tar.gz && \
     go version

dockerfiles/k8s-code-generator/setup.sh

@@ -68,7 +68,7 @@ cp -pr "$(go env GOMODCACHE)/k8s.io/code-generator@v$K8S_PKG_VERSION" "$(go env
 # to instead say "GO111MODULE=on go install ..." so this sed is a little wrong, but still seems to work.
 echo "Running go install for all k8s.io/code-generator commands ..."
 # Using sed to edit the go.mod file (and then running go mod tidy) is a dirty hack to work around
-# an issue introduced starting in Go 1.25.0. See https://github.com/golang/go/issues/74462.
+# an issue introduced in Go v1.25. See https://github.com/golang/go/issues/74462.
 # The version of code-generator used by Kube 1.30 depends on x/tools v0.18.0.
 # The version of code-generator used by Kube 1.31 depends on x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d.
 # Other versions of Kube use code-generator versions which do not have this problem.
@@ -87,7 +87,7 @@ if [[ ! -f "$(go env GOPATH)/bin/openapi-gen" ]]; then
   # Install that version of its openapi-gen command.
   echo "Running go install for openapi-gen $kube_openapi_version ..."
   # Using sed to edit the go.mod file (and then running go mod tidy) is a dirty hack to work around
-  # an issue introduced starting in Go 1.25.0. See https://github.com/golang/go/issues/74462.
+  # an issue introduced in Go v1.25. See https://github.com/golang/go/issues/74462.
   # If this were not needed, then we could just use "go install" directly without
   # copying the source code or editing the go.mod file (which is what this script used to do),
   # like this: go install -v "k8s.io/kube-openapi/cmd/openapi-gen@$kube_openapi_version"

pipelines/dockerfile-builders/pipeline.yml

@@ -38,7 +38,7 @@ meta:
   # These version numbers should be updated periodically.
   codegen-versions: &codegen-versions
     # Choose which version of Golang to use in the codegen container images.
-    BUILD_ARG_GO_VERSION: '1.25.0'
+    BUILD_ARG_GO_VERSION: '1.25.1'
     # Choose which version of sigs.k8s.io/controller-tools/cmd/controller-gen to install
     # in the codegen container images.
     BUILD_ARG_CONTROLLER_GEN_VERSION: 0.19.0

pipelines/pull-requests/pipeline.yml

@@ -606,7 +606,7 @@ jobs:
             type: registry-image
             source:
               repository: golang
-              tag: '1.25.0'
+              tag: '1.25.1'
           inputs:
             - name: pinniped-pr
           outputs:

pipelines/shared-tasks/build-cli-binaries/task.yml

@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 inputs:
   - name: pinniped
   - name: pinniped-ci

pipelines/shared-tasks/confirm-built-with-fips/task.yml

@@ -10,6 +10,6 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 run:
   path: pinniped-ci/pipelines/shared-tasks/confirm-built-with-fips/task.sh

pipelines/shared-tasks/confirm-version/task.yml

@@ -10,7 +10,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 run:
   # Confirm that the correct git sha was baked into the executables and that they log the version as their
   # first line of output. Do this by directly running the server binary from the rootfs of the built image.

pipelines/shared-tasks/format-release/task.yml

@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 inputs:
   - name: pinniped
   - name: release-semver

pipelines/shared-tasks/run-go-vuln-scan/task.yml

@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 inputs:
   - name: pinniped
   - name: pinniped-ci

pipelines/shared-tasks/run-unit-tests/task.yml

@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 inputs:
   - name: pinniped
   - name: pinniped-ci

pipelines/shared-tasks/run-verify-go-generate/task.yml

@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 inputs:
   - name: pinniped
   - name: pinniped-ci

pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml

@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 inputs:
   - name: pinniped
   - name: pinniped-ci

pipelines/shared-tasks/run-verify-lint/task.yml

@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 inputs:
   - name: pinniped
   - name: pinniped-ci

pipelines/shared-tasks/update-version-and-cli-docs/task.yml

@@ -7,7 +7,7 @@ image_resource:
   type: registry-image
   source:
     repository: golang
-    tag: '1.25.0'
+    tag: '1.25.1'
 inputs:
   - name: pinniped-ci
   - name: github-final-release