From 7765ee8c0eed40c5bc77100d3e09064f1ba4410b Mon Sep 17 00:00:00 2001 From: Oleksii Kurinnyi Date: Mon, 19 Jan 2026 16:17:50 +0200 Subject: [PATCH 1/6] chore: update Go toolchain to 1.25.3 Signed-off-by: Oleksii Kurinnyi --- .github/workflows/code-coverage.yml | 2 +- .github/workflows/pr.yml | 2 +- .github/workflows/release.yml | 2 +- CONTRIBUTING.md | 2 +- build/Dockerfile | 2 +- go.mod | 4 ++-- project-clone/Dockerfile | 2 +- 7 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/code-coverage.yml b/.github/workflows/code-coverage.yml index b92dc609f..a4d428c6d 100644 --- a/.github/workflows/code-coverage.yml +++ b/.github/workflows/code-coverage.yml @@ -14,7 +14,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.24.6 + go-version: 1.25.3 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index df77e3725..3216c9901 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -15,7 +15,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.24.6 + go-version: 1.25.3 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e3d2e1bf1..8a83d4359 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: - name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.23.6 + go-version: 1.25.3 - name: Set up QEMU uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 #v2.2.0 diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md index 71c3359c3..103f3cb92 100644 --- a/CONTRIBUTING.md +++ b/CONTRIBUTING.md @@ -46,7 +46,7 @@ Detailed instructions regarding the DevWorkspace Operator development are provid To build, test and debug the DevWorkspace Operator the following development tools are required: -- go 1.16 or later +- go 1.25 or later - git - sed - jq diff --git a/build/Dockerfile b/build/Dockerfile index 1188698ef..635512de2 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -15,7 +15,7 @@ # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset # Use BUILDPLATFORM to ensure the builder always runs natively on the host machine -FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.24.6-1758501173 AS builder +FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.3-1768393489 AS builder # Accept TARGETARCH and TARGETPLATFORM, which are automatically passed by the builder ARG TARGETARCH diff --git a/go.mod b/go.mod index 7cb507cb2..f9519dbae 100644 --- a/go.mod +++ b/go.mod @@ -1,8 +1,8 @@ module github.com/devfile/devworkspace-operator -go 1.24.0 +go 1.25.0 -toolchain go1.24.6 +toolchain go1.25.3 require ( github.com/devfile/api/v2 v2.3.1-alpha.0.20250521155908-5c3d7b99d252 diff --git a/project-clone/Dockerfile b/project-clone/Dockerfile index c8085887a..ec17803ab 100644 --- a/project-clone/Dockerfile +++ b/project-clone/Dockerfile @@ -15,7 +15,7 @@ # Build the manager binary # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset -FROM registry.access.redhat.com/ubi9/go-toolset:1.24.6-1758501173 as builder +FROM registry.access.redhat.com/ubi9/go-toolset:1.25.3-1768393489 as builder ARG TARGETARCH ARG TARGETOS ENV GOPATH=/go/ From 3c2521517a819742ef7923ca1d5224871f4a2a88 Mon Sep 17 00:00:00 2001 From: Oleksii Kurinnyi Date: Thu, 5 Feb 2026 16:10:57 +0200 Subject: [PATCH 2/6] chore: update Go toolchain to 1.25.5 Signed-off-by: Oleksii Kurinnyi --- .github/workflows/code-coverage.yml | 2 +- .github/workflows/pr.yml | 2 +- .github/workflows/release.yml | 2 +- build/Dockerfile | 3 ++- go.mod | 2 +- project-clone/Dockerfile | 3 ++- 6 files changed, 8 insertions(+), 6 deletions(-) diff --git a/.github/workflows/code-coverage.yml b/.github/workflows/code-coverage.yml index a4d428c6d..183ea2cb2 100644 --- a/.github/workflows/code-coverage.yml +++ b/.github/workflows/code-coverage.yml @@ -14,7 +14,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.3 + go-version: 1.25.5 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 3216c9901..789b94e93 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -15,7 +15,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.3 + go-version: 1.25.5 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8a83d4359..5ae4a73ac 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: - name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.3 + go-version: 1.25.5 - name: Set up QEMU uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 #v2.2.0 diff --git a/build/Dockerfile b/build/Dockerfile index 635512de2..5c507f15a 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -15,7 +15,8 @@ # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset # Use BUILDPLATFORM to ensure the builder always runs natively on the host machine -FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.3-1768393489 AS builder +# Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies +FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 AS builder # Accept TARGETARCH and TARGETPLATFORM, which are automatically passed by the builder ARG TARGETARCH diff --git a/go.mod b/go.mod index f9519dbae..97bbe746e 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/devfile/devworkspace-operator go 1.25.0 -toolchain go1.25.3 +toolchain go1.25.5 require ( github.com/devfile/api/v2 v2.3.1-alpha.0.20250521155908-5c3d7b99d252 diff --git a/project-clone/Dockerfile b/project-clone/Dockerfile index ec17803ab..cce872d2b 100644 --- a/project-clone/Dockerfile +++ b/project-clone/Dockerfile @@ -15,7 +15,8 @@ # Build the manager binary # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset -FROM registry.access.redhat.com/ubi9/go-toolset:1.25.3-1768393489 as builder +# Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies +FROM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 as builder ARG TARGETARCH ARG TARGETOS ENV GOPATH=/go/ From f4606767a11b519b35331410b392c0f768a8024f Mon Sep 17 00:00:00 2001 From: Oleksii Kurinnyi Date: Thu, 19 Feb 2026 11:19:02 +0200 Subject: [PATCH 3/6] fixup! chore: update Go toolchain to 1.25.5 Signed-off-by: Oleksii Kurinnyi --- .github/workflows/code-coverage.yml | 2 +- .github/workflows/pr.yml | 2 +- .github/workflows/release.yml | 2 +- build/Dockerfile | 2 +- go.mod | 2 +- project-clone/Dockerfile | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/code-coverage.yml b/.github/workflows/code-coverage.yml index 183ea2cb2..14c4888c0 100644 --- a/.github/workflows/code-coverage.yml +++ b/.github/workflows/code-coverage.yml @@ -14,7 +14,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.5 + go-version: 1.25.7 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 789b94e93..b5c0b8386 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -15,7 +15,7 @@ jobs: name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.5 + go-version: 1.25.7 - name: Set up Python 3.11 uses: actions/setup-python@b64ffcaf5b410884ad320a9cfac8866006a109aa # v4.8.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5ae4a73ac..523e1b70f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -32,7 +32,7 @@ jobs: - name: Set up Go 1.x uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0 with: - go-version: 1.25.5 + go-version: 1.25.7 - name: Set up QEMU uses: docker/setup-qemu-action@2b82ce82d56a2a04d2637cd93a637ae1b359c0a7 #v2.2.0 diff --git a/build/Dockerfile b/build/Dockerfile index 5c507f15a..c67fe6704 100644 --- a/build/Dockerfile +++ b/build/Dockerfile @@ -16,7 +16,7 @@ # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset # Use BUILDPLATFORM to ensure the builder always runs natively on the host machine # Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies -FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 AS builder +FROM --platform=$BUILDPLATFORM registry.access.redhat.com/ubi9/go-toolset:1.25.7-1771417345@sha256:799cc027d5ad58cdc156b65286eb6389993ec14c496cf748c09834b7251e78dc AS builder # Accept TARGETARCH and TARGETPLATFORM, which are automatically passed by the builder ARG TARGETARCH diff --git a/go.mod b/go.mod index 97bbe746e..b2434fb50 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/devfile/devworkspace-operator go 1.25.0 -toolchain go1.25.5 +toolchain go1.25.7 require ( github.com/devfile/api/v2 v2.3.1-alpha.0.20250521155908-5c3d7b99d252 diff --git a/project-clone/Dockerfile b/project-clone/Dockerfile index cce872d2b..dcd6e9895 100644 --- a/project-clone/Dockerfile +++ b/project-clone/Dockerfile @@ -16,7 +16,7 @@ # Build the manager binary # https://access.redhat.com/containers/?tab=tags#/registry.access.redhat.com/ubi9/go-toolset # Image pinned by SHA256 to address GitHub security bot warnings about unpinned dependencies -FROM registry.access.redhat.com/ubi9/go-toolset:1.25.5-1769430014@sha256:359dd4c6c4255b3f7bce4dc15ffa5a9aa65a401f819048466fa91baa8244a793 as builder +FROM registry.access.redhat.com/ubi9/go-toolset:1.25.7-1771417345@sha256:799cc027d5ad58cdc156b65286eb6389993ec14c496cf748c09834b7251e78dc as builder ARG TARGETARCH ARG TARGETOS ENV GOPATH=/go/ From 9d9c847b0928b72240294df78113f41e41d5c2c7 Mon Sep 17 00:00:00 2001 From: Oleksii Kurinnyi Date: Mon, 23 Feb 2026 14:30:02 +0200 Subject: [PATCH 4/6] fixup! fixup! chore: update Go toolchain to 1.25.5 Signed-off-by: Oleksii Kurinnyi --- .ci/oci.Dockerfile | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.ci/oci.Dockerfile b/.ci/oci.Dockerfile index ea0a4e305..6b7af39b4 100644 --- a/.ci/oci.Dockerfile +++ b/.ci/oci.Dockerfile @@ -14,6 +14,11 @@ # FROM registry.ci.openshift.org/openshift/release:rhel-9-release-golang-1.24-openshift-4.20 +FROM registry.ci.openshift.org/openshift/release:rhel-9-release-golang-1.24-openshift-4.20 + +ENV GO_VERSION=1.25.7 +ENV GOROOT=/usr/local/go +ENV PATH=$GOROOT/bin:$PATH ENV GO_VERSION=1.25.7 ENV GOROOT=/usr/local/go From ecb65fed9895bc50080f22883d16b8c294b12394 Mon Sep 17 00:00:00 2001 From: Oleksii Kurinnyi Date: Mon, 23 Feb 2026 14:40:40 +0200 Subject: [PATCH 5/6] fixup! fixup! fixup! chore: update Go toolchain to 1.25.5 Signed-off-by: Oleksii Kurinnyi --- .ci/oci.Dockerfile | 1 - 1 file changed, 1 deletion(-) diff --git a/.ci/oci.Dockerfile b/.ci/oci.Dockerfile index 6b7af39b4..cf93e6c22 100644 --- a/.ci/oci.Dockerfile +++ b/.ci/oci.Dockerfile @@ -13,7 +13,6 @@ # limitations under the License. # -FROM registry.ci.openshift.org/openshift/release:rhel-9-release-golang-1.24-openshift-4.20 FROM registry.ci.openshift.org/openshift/release:rhel-9-release-golang-1.24-openshift-4.20 ENV GO_VERSION=1.25.7 From 7a2c025f64173bdba7dbaf2d6e1d4a5b3d07c33c Mon Sep 17 00:00:00 2001 From: Oleksii Kurinnyi Date: Mon, 23 Feb 2026 16:01:53 +0200 Subject: [PATCH 6/6] fixup! fixup! fixup! fixup! chore: update Go toolchain to 1.25.5 Signed-off-by: Oleksii Kurinnyi --- .ci/oci.Dockerfile | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.ci/oci.Dockerfile b/.ci/oci.Dockerfile index cf93e6c22..a1a7e83ad 100644 --- a/.ci/oci.Dockerfile +++ b/.ci/oci.Dockerfile @@ -30,7 +30,9 @@ RUN export ARCH="$(uname -m)" && if [[ ${ARCH} == "x86_64" ]]; then export ARCH= curl -fsSL "https://go.dev/dl/go${GO_VERSION}.linux-${ARCH}.tar.gz" -o go.tar.gz && \ rm -rf /usr/local/go && \ tar -C /usr/local -xzf go.tar.gz && \ - rm go.tar.gz + rm go.tar.gz && \ + ln -sf /usr/local/go/bin/go /usr/bin/go.real && \ + ln -sf /usr/local/go/bin/gofmt /usr/bin/gofmt RUN go version # Temporary workaround since mirror.centos.org is down and can be replaced with vault.centos.org