From 500146bfee37da8b2c422a2f3689e83c8ac97102 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Fabiano=20Fid=C3=AAncio?= Date: Wed, 28 Jan 2026 20:55:58 +0100 Subject: [PATCH] versions: Bump Go to 1.24.12 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Update Go from 1.24.11 to 1.24.12 to address security vulnerabilities in the standard library: - GO-2026-4342: Excessive CPU consumption in archive/zip - GO-2026-4341: Memory exhaustion in net/url query parsing - GO-2026-4340: TLS handshake encryption level issue in crypto/tls Signed-off-by: Fabiano Fidêncio --- src/runtime/go.mod | 2 +- src/tools/csi-kata-directvolume/go.mod | 2 +- src/tools/log-parser/go.mod | 2 +- tests/go.mod | 2 +- tests/metrics/cmd/checkmetrics/go.mod | 2 +- tools/testing/kata-webhook/go.mod | 2 +- versions.yaml | 4 ++-- 7 files changed, 8 insertions(+), 8 deletions(-) diff --git a/src/runtime/go.mod b/src/runtime/go.mod index a6e746a9d0..702d436882 100644 --- a/src/runtime/go.mod +++ b/src/runtime/go.mod @@ -1,7 +1,7 @@ module github.com/kata-containers/kata-containers/src/runtime // Keep in sync with version in versions.yaml -go 1.24.11 +go 1.24.12 // WARNING: Do NOT use `replace` directives as those break dependabot: // https://github.com/kata-containers/kata-containers/issues/11020 diff --git a/src/tools/csi-kata-directvolume/go.mod b/src/tools/csi-kata-directvolume/go.mod index 06373f14ac..37651d3803 100644 --- a/src/tools/csi-kata-directvolume/go.mod +++ b/src/tools/csi-kata-directvolume/go.mod @@ -1,7 +1,7 @@ module kata-containers/csi-kata-directvolume // Keep in sync with version in versions.yaml -go 1.24.11 +go 1.24.12 // WARNING: Do NOT use `replace` directives as those break dependabot: // https://github.com/kata-containers/kata-containers/issues/11020 diff --git a/src/tools/log-parser/go.mod b/src/tools/log-parser/go.mod index 7f6ff75a3e..80ae1fa869 100644 --- a/src/tools/log-parser/go.mod +++ b/src/tools/log-parser/go.mod @@ -1,7 +1,7 @@ module github.com/kata-containers/kata-containers/src/tools/log-parser // Keep in sync with version in versions.yaml -go 1.24.11 +go 1.24.12 require ( github.com/BurntSushi/toml v1.1.0 diff --git a/tests/go.mod b/tests/go.mod index a3ac677881..98787f7e81 100644 --- a/tests/go.mod +++ b/tests/go.mod @@ -1,7 +1,7 @@ module github.com/kata-containers/tests // Keep in sync with version in versions.yaml -go 1.24.11 +go 1.24.12 // WARNING: Do NOT use `replace` directives as those break dependabot: // https://github.com/kata-containers/kata-containers/issues/11020 diff --git a/tests/metrics/cmd/checkmetrics/go.mod b/tests/metrics/cmd/checkmetrics/go.mod index e8299e5b23..bb8eddda9d 100644 --- a/tests/metrics/cmd/checkmetrics/go.mod +++ b/tests/metrics/cmd/checkmetrics/go.mod @@ -1,7 +1,7 @@ module example.com/m // Keep in sync with version in versions.yaml -go 1.24.11 +go 1.24.12 require ( github.com/BurntSushi/toml v1.3.2 diff --git a/tools/testing/kata-webhook/go.mod b/tools/testing/kata-webhook/go.mod index 4ad926bbcd..bd22b699f6 100644 --- a/tools/testing/kata-webhook/go.mod +++ b/tools/testing/kata-webhook/go.mod @@ -1,7 +1,7 @@ module module-path // Keep in sync with version in versions.yaml -go 1.24.11 +go 1.24.12 require ( github.com/sirupsen/logrus v1.9.3 diff --git a/versions.yaml b/versions.yaml index e2df43fe32..e97b0820ed 100644 --- a/versions.yaml +++ b/versions.yaml @@ -476,12 +476,12 @@ languages: description: "Google's 'go' language" notes: "'version' is the default minimum version used by this project." # When updating this, also update in go.mod files. - version: "1.24.11" + version: "1.24.12" meta: description: | 'newest-version' is the latest version known to work when building Kata - newest-version: "1.24.11" + newest-version: "1.24.12" rust: description: "Rust language"