chore: bump Go to 1.25

guzalv · claude · guzalv · commit b3c06db99979 · 2025-12-19T01:09:16.000+01:00
Update Go version from 1.24 to 1.25 across all modules and CI/CD configurations. Changes: - Update go.mod files (main, tools/test, tools/linters) to Go 1.25 - Update .golangci.yml to Go 1.25 - Update Konflux builder base image to rhel_8_golang_1.25 - Update CI test images to scanner-test-0.5.1 - Update OpenShift CI Dockerfiles to scanner-test-0.5.1 - Update BUILD_IMAGE_VERSION to scanner-build-0.5.1 Related: https://github.com/stackrox/rox-ci-image/releases/tag/0.5.1 User request: Update Go to 1.25 like it was done in ~/sw/stackrox-2 Co-authored-by: AI Assistant <noreply@anthropic.com>
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
@@ -39,7 +39,7 @@ jobs:
   pre-build-updater:
     runs-on: ubuntu-latest
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -72,7 +72,7 @@ jobs:
       fail-fast: false
       matrix: ${{ fromJson(needs.define-scanner-job-matrix.outputs.matrix).build_and_push }}
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -101,7 +101,7 @@ jobs:
   style-check:
     runs-on: ubuntu-latest
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -120,7 +120,7 @@ jobs:
   unit-tests:
     runs-on: ubuntu-latest
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -139,7 +139,7 @@ jobs:
   db-integration-tests:
     runs-on: ubuntu-latest
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -167,7 +167,7 @@ jobs:
     needs:
       - pre-build-updater
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -209,7 +209,7 @@ jobs:
     needs:
       - generate-genesis-dump
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -257,7 +257,7 @@ jobs:
       fail-fast: false
       matrix: ${{ fromJson(needs.define-scanner-job-matrix.outputs.matrix).build_and_push }}
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -314,7 +314,7 @@ jobs:
     needs:
       - generate-db-dump
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -365,7 +365,7 @@ jobs:
       fail-fast: false
       matrix: ${{ fromJson(needs.define-scanner-job-matrix.outputs.matrix).build_and_push }}
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -438,7 +438,7 @@ jobs:
       - build-images
     runs-on: ubuntu-latest
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     env:
       QUAY_RHACS_ENG_RW_USERNAME: ${{ secrets.QUAY_RHACS_ENG_RW_USERNAME }}
       QUAY_RHACS_ENG_RW_PASSWORD: ${{ secrets.QUAY_RHACS_ENG_RW_PASSWORD }}
@@ -484,7 +484,7 @@ jobs:
     needs:
       - generate-genesis-dump
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -602,7 +602,7 @@ jobs:
     needs:
       - generate-db-dump
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -630,7 +630,7 @@ jobs:
     needs:
       - generate-db-dump
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
@@ -664,7 +664,7 @@ jobs:
     needs:
       - generate-db-dump
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
diff --git a/.github/workflows/sanity-check-vuln-updates.yaml b/.github/workflows/sanity-check-vuln-updates.yaml
@@ -10,7 +10,7 @@ jobs:
       SLACK_WEBHOOK_ONCALL: ${{ secrets.SLACK_ONCALL_SCANNER_WEBHOOK }}
     runs-on: ubuntu-latest
     container:
-      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+      image: quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
     steps:
       - name: Checkout
         uses: actions/checkout@v6
diff --git a/.golangci.yml b/.golangci.yml
@@ -3,7 +3,7 @@
 run:
   timeout: 16m
   modules-download-mode: readonly
-  go: "1.23"
+  go: "1.25"
 
 output:
   formats:
diff --git a/.openshift-ci/Dockerfile.build_root b/.openshift-ci/Dockerfile.build_root
@@ -10,4 +10,4 @@
 # - `make update` and commit the results
 # - run `/test pj-rehearse-max` on the openshift/release PR to validate the change
 
-FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
diff --git a/.openshift-ci/build/Dockerfile.build-bundle b/.openshift-ci/build/Dockerfile.build-bundle
@@ -1,4 +1,4 @@
-FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
 
 COPY . /go/src/github.com/stackrox/scanner
 WORKDIR /go/src/github.com/stackrox/scanner
diff --git a/.openshift-ci/build/Dockerfile.build-db-bundle b/.openshift-ci/build/Dockerfile.build-db-bundle
@@ -1,4 +1,4 @@
-FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
 
 COPY . /go/src/github.com/stackrox/scanner
 WORKDIR /go/src/github.com/stackrox/scanner
diff --git a/.openshift-ci/build/Dockerfile.generate-db-dump b/.openshift-ci/build/Dockerfile.generate-db-dump
@@ -1,4 +1,4 @@
-FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
 
 COPY . /go/src/github.com/stackrox/scanner
 WORKDIR /go/src/github.com/stackrox/scanner
diff --git a/.openshift-ci/build/Dockerfile.generate-genesis-dump b/.openshift-ci/build/Dockerfile.generate-genesis-dump
@@ -1,4 +1,4 @@
-FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9
+FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1
 
 COPY . /go/src/github.com/stackrox/scanner
 WORKDIR /go/src/github.com/stackrox/scanner
diff --git a/BUILD_IMAGE_VERSION b/BUILD_IMAGE_VERSION
@@ -1 +1 @@
-scanner-build-0.4.9
+scanner-build-0.5.1
diff --git a/go.mod b/go.mod
@@ -1,8 +1,6 @@
 module github.com/stackrox/scanner
 
-go 1.24.0
-
-toolchain go1.24.4
+go 1.25
 
 require (
 	cloud.google.com/go/storage v1.58.0
diff --git a/image/scanner/rhel/konflux.Dockerfile b/image/scanner/rhel/konflux.Dockerfile
@@ -1,5 +1,5 @@
 # Compiling scanner binaries and staging repo2cpe and genesis manifests
-FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_1.24@sha256:c52f52b73cc121327416b3fe8d64d682eb48b2c86298a4d645d7169251700cd5 AS builder
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_8_golang_1.25@sha256:527782f4a0270f786192281f68d0374f4a21b3ab759643eee4bfcafb6f539468 AS builder
 
 ARG SCANNER_TAG
 RUN if [[ "$SCANNER_TAG" == "" ]]; then >&2 echo "error: required SCANNER_TAG arg is unset"; exit 6; fi
diff --git a/tools/linters/go.mod b/tools/linters/go.mod
@@ -1,6 +1,6 @@
 module github.com/stackrox/scanner/tools/linters
 
-go 1.24
+go 1.25
 
 require (
 	github.com/golangci/golangci-lint v1.64.8
diff --git a/tools/test/go.mod b/tools/test/go.mod
@@ -1,5 +1,5 @@
 module github.com/stackrox/scanner/tools/test
 
-go 1.24
+go 1.25
 
 require github.com/jstemmer/go-junit-report/v2 v2.1.0

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.4.9`
	`1`	`+FROM quay.io/stackrox-io/apollo-ci:scanner-test-0.5.1`
`2`	`2`
`3`	`3`	`COPY . /go/src/github.com/stackrox/scanner`
`4`	`4`	`WORKDIR /go/src/github.com/stackrox/scanner`
Original file line number	Diff line number	Diff line change
`@@ -1 +1 @@`
`1`		`-scanner-build-0.4.9`
	`1`	`+scanner-build-0.5.1`