From 31f9a5461b426bfd5c61ce8d8faa5b9f4c7390ab Mon Sep 17 00:00:00 2001 From: stevenhorsman Date: Thu, 9 Apr 2026 08:59:40 +0100 Subject: [PATCH] versions: bump golang to 1.25.9 Bump the go version to resolve CVEs: - GO-2026-4947 - GO-2026-4946 - GO-2026-4870 - GO-2026-4869 - GO-2026-4865 - GO-2026-4864 Signed-off-by: stevenhorsman --- src/runtime/go.mod | 2 +- src/tools/csi-kata-directvolume/go.mod | 2 +- src/tools/log-parser/go.mod | 2 +- tests/go.mod | 2 +- tests/metrics/cmd/checkmetrics/go.mod | 2 +- tools/testing/kata-webhook/go.mod | 2 +- versions.yaml | 4 ++-- 7 files changed, 8 insertions(+), 8 deletions(-) diff --git a/src/runtime/go.mod b/src/runtime/go.mod index e166887cbf..29641d5b68 100644 --- a/src/runtime/go.mod +++ b/src/runtime/go.mod @@ -1,7 +1,7 @@ module github.com/kata-containers/kata-containers/src/runtime // Keep in sync with version in versions.yaml -go 1.25.8 +go 1.25.9 // WARNING: Do NOT use `replace` directives as those break dependabot: // https://github.com/kata-containers/kata-containers/issues/11020 diff --git a/src/tools/csi-kata-directvolume/go.mod b/src/tools/csi-kata-directvolume/go.mod index e2050a8017..25e368de97 100644 --- a/src/tools/csi-kata-directvolume/go.mod +++ b/src/tools/csi-kata-directvolume/go.mod @@ -1,7 +1,7 @@ module kata-containers/csi-kata-directvolume // Keep in sync with version in versions.yaml -go 1.25.8 +go 1.25.9 // WARNING: Do NOT use `replace` directives as those break dependabot: // https://github.com/kata-containers/kata-containers/issues/11020 diff --git a/src/tools/log-parser/go.mod b/src/tools/log-parser/go.mod index 345a649839..7a91fd0b6a 100644 --- a/src/tools/log-parser/go.mod +++ b/src/tools/log-parser/go.mod @@ -1,7 +1,7 @@ module github.com/kata-containers/kata-containers/src/tools/log-parser // Keep in sync with version in versions.yaml -go 1.25.8 +go 1.25.9 require ( github.com/BurntSushi/toml v1.1.0 diff --git a/tests/go.mod b/tests/go.mod index 702bc40d03..0fc2f38e7e 100644 --- a/tests/go.mod +++ b/tests/go.mod @@ -1,7 +1,7 @@ module github.com/kata-containers/tests // Keep in sync with version in versions.yaml -go 1.25.8 +go 1.25.9 // WARNING: Do NOT use `replace` directives as those break dependabot: // https://github.com/kata-containers/kata-containers/issues/11020 diff --git a/tests/metrics/cmd/checkmetrics/go.mod b/tests/metrics/cmd/checkmetrics/go.mod index 126144ed91..40bee28856 100644 --- a/tests/metrics/cmd/checkmetrics/go.mod +++ b/tests/metrics/cmd/checkmetrics/go.mod @@ -1,7 +1,7 @@ module example.com/m // Keep in sync with version in versions.yaml -go 1.25.8 +go 1.25.9 require ( github.com/BurntSushi/toml v1.3.2 diff --git a/tools/testing/kata-webhook/go.mod b/tools/testing/kata-webhook/go.mod index a561657987..bdd3706ca5 100644 --- a/tools/testing/kata-webhook/go.mod +++ b/tools/testing/kata-webhook/go.mod @@ -1,7 +1,7 @@ module module-path // Keep in sync with version in versions.yaml -go 1.25.8 +go 1.25.9 require ( github.com/sirupsen/logrus v1.9.3 diff --git a/versions.yaml b/versions.yaml index b01121d856..7ca2622ec2 100644 --- a/versions.yaml +++ b/versions.yaml @@ -470,12 +470,12 @@ languages: description: "Google's 'go' language" notes: "'version' is the default minimum version used by this project." # When updating this, also update in go.mod files. - version: "1.25.8" + version: "1.25.9" meta: description: | 'newest-version' is the latest version known to work when building Kata - newest-version: "1.25.8" + newest-version: "1.25.9" rust: description: "Rust language"