pin patch version for golang and base image

Signed-off-by: Lyndon-Li <lyonghui@vmware.com>

Dockerfile

@@ -13,7 +13,7 @@
 # limitations under the License.
 
 # Velero binary build section
-FROM --platform=$BUILDPLATFORM golang:1.27-trixie AS velero-builder
+FROM --platform=$BUILDPLATFORM golang:1.27.3-trixie AS velero-builder
 
 ARG GOPROXY
 ARG BIN
@@ -49,7 +49,7 @@ RUN mkdir -p /output/usr/bin && \
     go clean -modcache -cache
 
 # Velero image packing section
-FROM paketobuildpacks/ubuntu-noble-run-tiny:latest
+FROM paketobuildpacks/ubuntu-noble-run-tiny:0.0.156
 
 LABEL maintainer="Xun Jiang <xun.jiang@broadcom.com>"
 

Dockerfile-Windows

@@ -15,7 +15,7 @@
 ARG OS_VERSION=1809
 
 # Velero binary build section
-FROM --platform=$BUILDPLATFORM golang:1.27-trixie AS velero-builder
+FROM --platform=$BUILDPLATFORM golang:1.27.3-trixie AS velero-builder
 
 ARG GOPROXY
 ARG BIN

Tiltfile

@@ -87,7 +87,7 @@ print("Tilt: cluster_goarch={} (local {})".format(cluster_goarch, local_goarch))
 
 tilt_helper_dockerfile_header = """
 # Tilt image
-FROM golang:1.27-trixie as tilt-helper
+FROM golang:1.27.3-trixie as tilt-helper
 
 # Support live reloading with Tilt
 RUN wget --output-document /restart.sh --quiet https://raw.githubusercontent.com/windmilleng/rerun-process-wrapper/master/restart.sh  && \

go.mod

@@ -2,6 +2,8 @@ module github.com/velero-io/velero
 
 go 1.27.0
 
+toolchain go1.27.3
+
 require (
 	cloud.google.com/go/storage v1.62.3
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.22.0

hack/build-image/Dockerfile

@@ -12,7 +12,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM --platform=$TARGETPLATFORM golang:1.27-trixie
+FROM --platform=$TARGETPLATFORM golang:1.27.3-trixie
 
 ARG GOPROXY
 ARG PROTOC_GEN_GO_VERSION