From a62391c12b95dde818d730c9042a77734221077c Mon Sep 17 00:00:00 2001 From: Ryan Richard Date: Wed, 11 Feb 2026 12:24:14 -0800 Subject: [PATCH] upgrade CI to use Go 1.26.0 --- dockerfiles/code-coverage-uploader/Dockerfile | 2 +- dockerfiles/crane/Dockerfile | 2 +- dockerfiles/gh-cli/Dockerfile | 2 +- dockerfiles/integration-test-runner-beta/Dockerfile | 2 +- dockerfiles/integration-test-runner/Dockerfile | 2 +- dockerfiles/test-cfssl/Dockerfile | 2 +- pipelines/dockerfile-builders/pipeline.yml | 2 +- pipelines/pull-requests/pipeline.yml | 2 +- pipelines/shared-helpers/test-binaries-image/Dockerfile | 2 +- pipelines/shared-helpers/test-binaries-image/Dockerfile_fips | 2 +- pipelines/shared-tasks/build-cli-binaries/task.yml | 2 +- pipelines/shared-tasks/confirm-built-with-fips/task.yml | 2 +- pipelines/shared-tasks/confirm-version/task.yml | 2 +- pipelines/shared-tasks/format-release/task.yml | 2 +- pipelines/shared-tasks/run-go-vuln-scan/task.yml | 2 +- pipelines/shared-tasks/run-unit-tests/task.yml | 2 +- pipelines/shared-tasks/run-verify-go-generate/task.yml | 2 +- pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml | 2 +- pipelines/shared-tasks/run-verify-lint/task.yml | 2 +- pipelines/shared-tasks/update-version-and-cli-docs/task.yml | 2 +- 20 files changed, 20 insertions(+), 20 deletions(-) diff --git a/dockerfiles/code-coverage-uploader/Dockerfile b/dockerfiles/code-coverage-uploader/Dockerfile index 9e57e9736..b4bd5be99 100644 --- a/dockerfiles/code-coverage-uploader/Dockerfile +++ b/dockerfiles/code-coverage-uploader/Dockerfile @@ -9,6 +9,6 @@ RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/* RUN curl -sfLo /tmp/codecov https://uploader.codecov.io/latest/linux/codecov RUN chmod +x /tmp/codecov -FROM golang:1.25.6 +FROM golang:1.26.0 RUN apt-get update -y && apt-get dist-upgrade -y COPY --from=builder /tmp/codecov /usr/local/bin/codecov diff --git a/dockerfiles/crane/Dockerfile b/dockerfiles/crane/Dockerfile index 82c5e6394..f0d15378c 100644 --- a/dockerfiles/crane/Dockerfile +++ b/dockerfiles/crane/Dockerfile @@ -4,7 +4,7 @@ FROM gcr.io/go-containerregistry/crane as crane FROM mikefarah/yq:4.50.1 AS yq -FROM golang:1.25.6 +FROM golang:1.26.0 COPY --from=yq /usr/bin/yq /usr/local/bin COPY --from=crane /ko-app/crane /usr/local/bin ENTRYPOINT ["bash"] diff --git a/dockerfiles/gh-cli/Dockerfile b/dockerfiles/gh-cli/Dockerfile index aa753cb39..a0f22f3b5 100644 --- a/dockerfiles/gh-cli/Dockerfile +++ b/dockerfiles/gh-cli/Dockerfile @@ -11,5 +11,5 @@ RUN curl \ https://github.com/cli/cli/releases/download/v2.40.0/gh_2.40.0_linux_amd64.tar.gz \ && tar -C /tmp --strip-components=1 -xzvf /tmp/gh.tar.gz -FROM golang:1.25.6 +FROM golang:1.26.0 COPY --from=builder /tmp/bin/gh /usr/local/bin/gh diff --git a/dockerfiles/integration-test-runner-beta/Dockerfile b/dockerfiles/integration-test-runner-beta/Dockerfile index e43e15cf7..17c6c23aa 100644 --- a/dockerfiles/integration-test-runner-beta/Dockerfile +++ b/dockerfiles/integration-test-runner-beta/Dockerfile @@ -36,7 +36,7 @@ RUN google-chrome --version # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/ ENV PATH /usr/local/go/bin:$PATH -RUN curl -fsSL https://go.dev/dl/go1.25.6.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ +RUN curl -fsSL https://go.dev/dl/go1.26.0.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ tar -C /usr/local -xzf /tmp/go.tar.gz && \ rm /tmp/go.tar.gz && \ go version diff --git a/dockerfiles/integration-test-runner/Dockerfile b/dockerfiles/integration-test-runner/Dockerfile index 3abf433b4..eb35decc3 100644 --- a/dockerfiles/integration-test-runner/Dockerfile +++ b/dockerfiles/integration-test-runner/Dockerfile @@ -36,7 +36,7 @@ RUN google-chrome --version # Install Go. The download URL that can be used below for any version of Go can be found on https://go.dev/dl/ ENV PATH /usr/local/go/bin:$PATH -RUN curl -fsSL https://go.dev/dl/go1.25.6.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ +RUN curl -fsSL https://go.dev/dl/go1.26.0.linux-amd64.tar.gz -o /tmp/go.tar.gz && \ tar -C /usr/local -xzf /tmp/go.tar.gz && \ rm /tmp/go.tar.gz && \ go version diff --git a/dockerfiles/test-cfssl/Dockerfile b/dockerfiles/test-cfssl/Dockerfile index e73794f5d..b61100348 100644 --- a/dockerfiles/test-cfssl/Dockerfile +++ b/dockerfiles/test-cfssl/Dockerfile @@ -11,7 +11,7 @@ FROM cfssl/cfssl:v1.6.5 as cfssl # We just need any basic unix with bash, but we can pick the same # base image that they use, just in case they did any dynamic linking. -FROM golang:1.25.6 +FROM golang:1.26.0 # Thier Docerfile https://github.com/cloudflare/cfssl/blob/master/Dockerfile # calls their Makefile https://github.com/cloudflare/cfssl/blob/master/Makefile diff --git a/pipelines/dockerfile-builders/pipeline.yml b/pipelines/dockerfile-builders/pipeline.yml index 97009b8a1..b0599c03e 100644 --- a/pipelines/dockerfile-builders/pipeline.yml +++ b/pipelines/dockerfile-builders/pipeline.yml @@ -38,7 +38,7 @@ meta: # These version numbers should be updated periodically. codegen-versions: &codegen-versions # Choose which version of Golang to use in the codegen container images. - BUILD_ARG_GO_VERSION: '1.25.6' + BUILD_ARG_GO_VERSION: '1.26.0' # Choose which version of sigs.k8s.io/controller-tools/cmd/controller-gen to install # in the codegen container images. BUILD_ARG_CONTROLLER_GEN_VERSION: 0.20.0 diff --git a/pipelines/pull-requests/pipeline.yml b/pipelines/pull-requests/pipeline.yml index 81a25cf79..601b2cdff 100644 --- a/pipelines/pull-requests/pipeline.yml +++ b/pipelines/pull-requests/pipeline.yml @@ -572,7 +572,7 @@ jobs: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' inputs: - name: pinniped-pr outputs: diff --git a/pipelines/shared-helpers/test-binaries-image/Dockerfile b/pipelines/shared-helpers/test-binaries-image/Dockerfile index f03154cf7..60a33ce1d 100644 --- a/pipelines/shared-helpers/test-binaries-image/Dockerfile +++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile @@ -3,7 +3,7 @@ # Copyright 2020-2026 the Pinniped contributors. All Rights Reserved. # SPDX-License-Identifier: Apache-2.0 -FROM golang:1.25.6-bookworm as build-env +FROM golang:1.26.0-bookworm as build-env WORKDIR /work COPY . . ARG GOPROXY diff --git a/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips b/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips index 0cd4e3857..43fdb7f33 100644 --- a/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips +++ b/pipelines/shared-helpers/test-binaries-image/Dockerfile_fips @@ -6,7 +6,7 @@ # we need a separate dockerfile for the fips test image so that the integration tests # use the right ciphers etc. -FROM golang:1.25.6-bookworm as build-env +FROM golang:1.26.0-bookworm as build-env WORKDIR /work COPY . . ARG GOPROXY diff --git a/pipelines/shared-tasks/build-cli-binaries/task.yml b/pipelines/shared-tasks/build-cli-binaries/task.yml index 04e5c308a..303e2bb74 100644 --- a/pipelines/shared-tasks/build-cli-binaries/task.yml +++ b/pipelines/shared-tasks/build-cli-binaries/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/confirm-built-with-fips/task.yml b/pipelines/shared-tasks/confirm-built-with-fips/task.yml index c8a593691..f94ac2849 100644 --- a/pipelines/shared-tasks/confirm-built-with-fips/task.yml +++ b/pipelines/shared-tasks/confirm-built-with-fips/task.yml @@ -10,6 +10,6 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' run: path: pinniped-ci/pipelines/shared-tasks/confirm-built-with-fips/task.sh diff --git a/pipelines/shared-tasks/confirm-version/task.yml b/pipelines/shared-tasks/confirm-version/task.yml index 3cdd4879d..f6ce05861 100644 --- a/pipelines/shared-tasks/confirm-version/task.yml +++ b/pipelines/shared-tasks/confirm-version/task.yml @@ -10,7 +10,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' run: # Confirm that the correct git sha was baked into the executables and that they log the version as their # first line of output. Do this by directly running the server binary from the rootfs of the built image. diff --git a/pipelines/shared-tasks/format-release/task.yml b/pipelines/shared-tasks/format-release/task.yml index 3303ba844..e57c1bd87 100644 --- a/pipelines/shared-tasks/format-release/task.yml +++ b/pipelines/shared-tasks/format-release/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' inputs: - name: pinniped - name: release-semver diff --git a/pipelines/shared-tasks/run-go-vuln-scan/task.yml b/pipelines/shared-tasks/run-go-vuln-scan/task.yml index 5019cd4f6..a21f71da1 100644 --- a/pipelines/shared-tasks/run-go-vuln-scan/task.yml +++ b/pipelines/shared-tasks/run-go-vuln-scan/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-unit-tests/task.yml b/pipelines/shared-tasks/run-unit-tests/task.yml index 0253b734f..744efabf7 100644 --- a/pipelines/shared-tasks/run-unit-tests/task.yml +++ b/pipelines/shared-tasks/run-unit-tests/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-verify-go-generate/task.yml b/pipelines/shared-tasks/run-verify-go-generate/task.yml index ba799714e..586ae767a 100644 --- a/pipelines/shared-tasks/run-verify-go-generate/task.yml +++ b/pipelines/shared-tasks/run-verify-go-generate/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml b/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml index ecb0a4845..5e19eeada 100644 --- a/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml +++ b/pipelines/shared-tasks/run-verify-go-mod-tidy/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/run-verify-lint/task.yml b/pipelines/shared-tasks/run-verify-lint/task.yml index 34ab74127..b4dd8dab7 100644 --- a/pipelines/shared-tasks/run-verify-lint/task.yml +++ b/pipelines/shared-tasks/run-verify-lint/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' inputs: - name: pinniped - name: pinniped-ci diff --git a/pipelines/shared-tasks/update-version-and-cli-docs/task.yml b/pipelines/shared-tasks/update-version-and-cli-docs/task.yml index 555e362be..7a2d75730 100644 --- a/pipelines/shared-tasks/update-version-and-cli-docs/task.yml +++ b/pipelines/shared-tasks/update-version-and-cli-docs/task.yml @@ -7,7 +7,7 @@ image_resource: type: registry-image source: repository: golang - tag: '1.25.6' + tag: '1.26.0' inputs: - name: pinniped-ci - name: github-final-release