Update minimal go version to fix stdlib CVEs

.ci-operator.yaml

@@ -1,4 +1,4 @@
 build_root_image:
   name: builder
   namespace: ocp
-  tag: rhel-9-golang-1.24-openshift-4.16
+  tag: rhel-9-golang-1.25-openshift-4.21

Dockerfile

@@ -10,17 +10,17 @@ RUN yum --assumeyes install \
     && yum clean all;
 
 ### Build backplane-cli
-FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.24 as bp-cli-builder
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_10_golang_1.25 as bp-cli-builder
 
 
 # Configure the env
 
-RUN go env -w GOTOOLCHAIN=go1.24.4+auto
 
 #Environment variables
 ENV GOOS=linux GO111MODULE=on GOPROXY=https://proxy.golang.org 
 ENV GOBIN=/gobin GOPATH=/usr/src/go CGO_ENABLED=0
-ENV GOTOOLCHAIN=go1.24.4+auto
+ENV GOTOOLCHAIN=go1.25.5+auto
+RUN go env -w GOTOOLCHAIN=$GOTOOLCHAIN
 
 # Directory for the binary
 RUN mkdir /out
@@ -35,10 +35,7 @@ RUN cp ./ocm-backplane /out
 RUN chmod -R +x /out
 
 ### Build dependencies
-FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_9_golang_1.24 as dep-builder
-
-# Ensure we can use Go 1.24.4
-ENV GOTOOLCHAIN=go1.24.4+auto
+FROM brew.registry.redhat.io/rh-osbs/openshift-golang-builder:rhel_10_golang_1.25 as dep-builder
 
 ARG GITHUB_URL="https://api.github.com"
 ARG GITHUB_TOKEN=""

Makefile

@@ -12,6 +12,7 @@ GO_BUILD_FLAGS_LINUX_CROSS :=-tags 'include_gcs include_oss containers_image_ope
 GOLANGCI_LINT_VERSION=v2.5.0
 GORELEASER_VERSION=v1.14.1
 GOVULNCHECK_VERSION=v1.0.1
+export GOTOOLCHAIN=go1.25.5+auto
 
 TESTOPTS ?=
 
@@ -49,13 +50,13 @@ OUTPUT_DIR :=_output
 CROSS_BUILD_BINDIR :=$(OUTPUT_DIR)/bin
 
 build: clean
-	env -u GOTOOLCHAIN GOTOOLCHAIN=go1.24.4+auto go build -o ocm-backplane ./cmd/ocm-backplane || exit 1
+	go build -o ocm-backplane ./cmd/ocm-backplane || exit 1
 
 build-static: clean
-	env -u GOTOOLCHAIN GOTOOLCHAIN=go1.24.4+auto go build -a -installsuffix cgo -ldflags '-extldflags "-static"' -o ocm-backplane ./cmd/ocm-backplane || exit 1
+	go build -a -installsuffix cgo -ldflags '-extldflags "-static"' -o ocm-backplane ./cmd/ocm-backplane || exit 1
 
 install:
-	GOTOOLCHAIN=go1.24.4+auto go install ./cmd/ocm-backplane
+	go install ./cmd/ocm-backplane
 
 clean:
 	rm -f ocm-backplane
@@ -82,18 +83,18 @@ release-with-note: ensure-goreleaser
 	goreleaser release --rm-dist --release-notes="$(NOTE)"
 
 test:
-	env -u GOTOOLCHAIN GOTOOLCHAIN=go1.24.4+auto go test -v $(TESTOPTS) ./...
+	go test -v $(TESTOPTS) ./...
 
 .PHONY: coverage
 coverage:
 	hack/codecov.sh
 
 cross-build-darwin-amd64:
-	+@GOOS=darwin GOARCH=amd64 GOTOOLCHAIN=go1.24.4+auto go build $(GO_BUILD_FLAGS_DARWIN) -o $(CROSS_BUILD_BINDIR)/ocm-backplane_darwin_amd64 ./cmd/ocm-backplane
+	+@GOOS=darwin GOARCH=amd64 go build $(GO_BUILD_FLAGS_DARWIN) -o $(CROSS_BUILD_BINDIR)/ocm-backplane_darwin_amd64 ./cmd/ocm-backplane
 .PHONY: cross-build-darwin-amd64
 
 cross-build-linux-amd64:
-	+@GOOS=linux GOARCH=amd64 GOTOOLCHAIN=go1.24.4+auto go build $(GO_BUILD_FLAGS_LINUX_CROSS) -o $(CROSS_BUILD_BINDIR)/ocm-backplane_linux_amd64 ./cmd/ocm-backplane
+	+@GOOS=linux GOARCH=amd64 go build $(GO_BUILD_FLAGS_LINUX_CROSS) -o $(CROSS_BUILD_BINDIR)/ocm-backplane_linux_amd64 ./cmd/ocm-backplane
 .PHONY: cross-build-linux-amd64
 
 cross-build: cross-build-darwin-amd64 cross-build-linux-amd64
@@ -106,7 +107,7 @@ clean-cross-build:
 
 .PHONY: generate
 generate:
-	GOTOOLCHAIN=go1.24.4+auto go generate ./...
+	go generate ./...
 
 .PHONY: mock-gen
 mock-gen:

go.mod

@@ -1,6 +1,6 @@
 module github.com/openshift/backplane-cli
 
-go 1.24.4
+go 1.25.5
 
 require (
 	github.com/Masterminds/semver v1.5.0