From 50d21fef6ae745345a44a9ffd8e1136b61d5a67c Mon Sep 17 00:00:00 2001 From: Oleksii Kurinnyi Date: Mon, 19 Jan 2026 16:17:50 +0200 Subject: [PATCH 1/3] chore: update Go toolchain to 1.25.3 Signed-off-by: Oleksii Kurinnyi --- .github/workflows/code-coverage.yml | 2 +- .github/workflows/pr.yml | 2 +- .github/workflows/release.yml | 2 +- CONTRIBUTING.md | 2 +- build/Dockerfile | 2 +- go.mod | 4 ++-- project-clone/Dockerfile | 2 +- 7 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/code-coverage.yml b/.github/workflows/code-coverage.yml index b92dc609f..a4d428c6d 100644 --- a/.github/workflows/code-coverage.yml +++ b/.github/workflows/code-coverage.yml @@ -14,7 +14,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.24.6 + go-version: 1.25.3 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index df77e3725..3216c9901 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -15,7 +15,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.24.6 + go-version: 1.25.3 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e3d2e1bf1..8a83d4359 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: - name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.23.6 + go-version: 1.25.3 - name: Set up QEMU uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 #v2.2.0 diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 71c3359c3..103f3cb92 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -46,7 +46,7 @@ Detailed instructions regarding the DevWorkspace Operator development are provid To build, test and debug the DevWorkspace Operator the following development tools are required: -- go 1.16 or later +- go 1.25 or later - git - sed - jq diff --git a/build/Dockerfile b/build/Dockerfile index 1188698ef..635512de2 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -15,7 +15,7 @@ # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset # Use BUILDPLATFORM to ensure the builder always runs natively on the host machine -FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.24.6-1758501173 AS builder +FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.3-1768393489 AS builder # Accept TARGETARCH and TARGETPLATFORM, which are automatically passed by the builder ARG TARGETARCH diff --git a/go.mod b/go.mod index 7cb507cb2..f9519dbae 100644 --- a/go.mod +++ b/go.mod @@ -1,8 +1,8 @@ module github.com/devfile/devworkspace-operator -go 1.24.0 +go 1.25.0 -toolchain go1.24.6 +toolchain go1.25.3 require ( github.com/devfile/api/v2 v2.3.1-alpha.0.20250521155908-5c3d7b99d252 diff --git a/project-clone/Dockerfile b/project-clone/Dockerfile index c8085887a..ec17803ab 100644 --- a/project-clone/Dockerfile +++ b/project-clone/Dockerfile @@ -15,7 +15,7 @@ # Build the manager binary # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset -FROM registry.access.redhat.com/ubi9/go-toolset:1.24.6-1758501173 as builder +FROM registry.access.redhat.com/ubi9/go-toolset:1.25.3-1768393489 as builder ARG TARGETARCH ARG TARGETOS ENV GOPATH=/go/ From 2281ca7734b52f0de7daf8afbb63f22caa240c92 Mon Sep 17 00:00:00 2001 From: Oleksii Kurinnyi Date: Thu, 5 Feb 2026 16:10:57 +0200 Subject: [PATCH 2/3] chore: update Go toolchain to 1.25.5 Signed-off-by: Oleksii Kurinnyi --- .github/workflows/code-coverage.yml | 2 +- .github/workflows/pr.yml | 2 +- .github/workflows/release.yml | 2 +- build/Dockerfile | 3 ++- go.mod | 2 +- project-clone/Dockerfile | 3 ++- 6 files changed, 8 insertions(+), 6 deletions(-) diff --git a/.github/workflows/code-coverage.yml b/.github/workflows/code-coverage.yml index a4d428c6d..183ea2cb2 100644 --- a/.github/workflows/code-coverage.yml +++ b/.github/workflows/code-coverage.yml @@ -14,7 +14,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.3 + go-version: 1.25.5 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 3216c9901..789b94e93 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -15,7 +15,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.3 + go-version: 1.25.5 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8a83d4359..5ae4a73ac 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: - name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.3 + go-version: 1.25.5 - name: Set up QEMU uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 #v2.2.0 diff --git a/build/Dockerfile b/build/Dockerfile index 635512de2..5c507f15a 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -15,7 +15,8 @@ # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset # Use BUILDPLATFORM to ensure the builder always runs natively on the host machine -FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.3-1768393489 AS builder +# Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies +FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 AS builder # Accept TARGETARCH and TARGETPLATFORM, which are automatically passed by the builder ARG TARGETARCH diff --git a/go.mod b/go.mod index f9519dbae..97bbe746e 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/devfile/devworkspace-operator go 1.25.0 -toolchain go1.25.3 +toolchain go1.25.5 require ( github.com/devfile/api/v2 v2.3.1-alpha.0.20250521155908-5c3d7b99d252 diff --git a/project-clone/Dockerfile b/project-clone/Dockerfile index ec17803ab..cce872d2b 100644 --- a/project-clone/Dockerfile +++ b/project-clone/Dockerfile @@ -15,7 +15,8 @@ # Build the manager binary # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset -FROM registry.access.redhat.com/ubi9/go-toolset:1.25.3-1768393489 as builder +# Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies +FROM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 as builder ARG TARGETARCH ARG TARGETOS ENV GOPATH=/go/ From 86a6f3e5c3333352c1e01320edc8437d3b96c203 Mon Sep 17 00:00:00 2001 From: Oleksii Kurinnyi Date: Thu, 19 Feb 2026 11:19:02 +0200 Subject: [PATCH 3/3] fixup! chore: update Go toolchain to 1.25.5 Signed-off-by: Oleksii Kurinnyi --- .github/workflows/code-coverage.yml | 2 +- .github/workflows/pr.yml | 2 +- .github/workflows/release.yml | 2 +- build/Dockerfile | 2 +- go.mod | 2 +- project-clone/Dockerfile | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/code-coverage.yml b/.github/workflows/code-coverage.yml index 183ea2cb2..14c4888c0 100644 --- a/.github/workflows/code-coverage.yml +++ b/.github/workflows/code-coverage.yml @@ -14,7 +14,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.5 + go-version: 1.25.7 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 789b94e93..b5c0b8386 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -15,7 +15,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.5 + go-version: 1.25.7 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5ae4a73ac..523e1b70f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: - name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.5 + go-version: 1.25.7 - name: Set up QEMU uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 #v2.2.0 diff --git a/build/Dockerfile b/build/Dockerfile index 5c507f15a..c67fe6704 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -16,7 +16,7 @@ # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset # Use BUILDPLATFORM to ensure the builder always runs natively on the host machine # Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies -FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 AS builder +FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.7-1771417345@sha256:799cc027d5ad58cdc156b65286eb6389993ec14c496cf748c09834b7251e78dc AS builder # Accept TARGETARCH and TARGETPLATFORM, which are automatically passed by the builder ARG TARGETARCH diff --git a/go.mod b/go.mod index 97bbe746e..b2434fb50 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/devfile/devworkspace-operator go 1.25.0 -toolchain go1.25.5 +toolchain go1.25.7 require ( github.com/devfile/api/v2 v2.3.1-alpha.0.20250521155908-5c3d7b99d252 diff --git a/project-clone/Dockerfile b/project-clone/Dockerfile index cce872d2b..dcd6e9895 100644 --- a/project-clone/Dockerfile +++ b/project-clone/Dockerfile @@ -16,7 +16,7 @@ # Build the manager binary # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset # Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies -FROM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 as builder +FROM registry.access.redhat.com/ubi9/go-toolset:1.25.7-1771417345@sha256:799cc027d5ad58cdc156b65286eb6389993ec14c496cf748c09834b7251e78dc as builder ARG TARGETARCH ARG TARGETOS ENV GOPATH=/go/