Skip to content

Upgrade Go version to 1.26.3#10081

Open
alphanota wants to merge 2 commits into
GoogleContainerTools:mainfrom
alphanota:upgrade-go-1.26.3
Open

Upgrade Go version to 1.26.3#10081
alphanota wants to merge 2 commits into
GoogleContainerTools:mainfrom
alphanota:upgrade-go-1.26.3

Conversation

@alphanota
Copy link
Copy Markdown
Contributor

Upgrade Go version to 1.26.3 to address security vulnerabilities in the Go standard library. This upgrades the go.mod directive and the GitHub Actions workflows to use Go 1.26.3.

@alphanota alphanota requested a review from a team as a code owner May 12, 2026 19:42
Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Go version in go.mod from 1.25.5 to 1.26.3. Feedback indicates that the upgrade is incomplete, highlighting the need to update the vendor directory, GitHub Actions workflows, and Dockerfiles, as well as running go mod tidy to ensure consistency across the project.

Comment thread go.mod
module github.com/GoogleContainerTools/skaffold/v2

go 1.25.5
go 1.26.3
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The upgrade to Go 1.26.3 appears incomplete and will likely cause build failures or inconsistencies:

  • Vendoring: The project uses vendoring (see Makefile lines 80 and 101). You must run go mod vendor to update the vendor/ directory. The Go toolchain requires vendor/modules.txt to match the go directive in go.mod when building with -mod=vendor.
  • Missing Workflow Updates: The PR description mentions upgrading GitHub Actions workflows, but no changes to .github/workflows/ are included in the diff.
  • Dockerfile Consistency: Dockerfiles (e.g., deploy/skaffold/Dockerfile) should be updated to use the 1.26.3 base image to ensure consistency between development and build environments.
  • Checksums and Tidying: Ensure go.sum is updated and run go mod tidy to refresh dependency annotations for the new toolchain version.

@alphanota alphanota marked this pull request as draft May 12, 2026 19:45
@alphanota alphanota force-pushed the upgrade-go-1.26.3 branch from e966302 to 3238948 Compare May 12, 2026 20:55
@alphanota alphanota self-assigned this May 12, 2026
@alphanota alphanota marked this pull request as ready for review May 12, 2026 22:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant