Skip to content

Conversation

@hongkailiu
Copy link
Member

Required by #1284

@coderabbitai
Copy link

coderabbitai bot commented Jan 12, 2026

Walkthrough

Bumps Go toolchain from 1.24.0 to 1.25.0 and updates numerous direct and indirect dependencies; also updates CI build root image tag to use the Go 1.25-based RHEL image. No functional code or API signatures were changed.

Changes

Cohort / File(s) Summary
Go module updates
go.mod
Upgraded Go version to 1.25.0 and bumped 30+ dependencies (logr, ginkgo/gomega, Kubernetes packages v0.34.x→v0.35.0, OpenTelemetry, Prometheus clients, spf13/cobra, golang.org/x/* packages, protobuf/genproto, yaml, and various indirects). Replacement directive for openshift/onsi-ginkgo retained/updated.
CI build image
.ci-operator.yaml
Updated build_root_image.tag from rhel-9-release-golang-1.24-openshift-4.21 to rhel-9-release-golang-1.25-openshift-4.22. No other CI logic changes.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes


Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jan 12, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: hongkailiu

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jan 12, 2026
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Fix all issues with AI agents
In @go.mod:
- Line 3: The go version in the module directive ("go 1.25.0") is vulnerable;
update the module directive value from "go 1.25.0" to "go 1.25.2" (or later) in
the go.mod so the project is built with a Go release that includes CVE fixes and
then rebuild CI/artifacts with the new toolchain; ensure any build matrices or
Dockerfiles that pin Go are also updated to the same minimum version.
📜 Review details

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Cache: Disabled due to data retention organization setting

Knowledge base: Disabled due to Reviews -> Disable Knowledge Base setting

📥 Commits

Reviewing files that changed from the base of the PR and between 8324378 and 12582e2.

⛔ Files ignored due to path filters (299)
  • go.sum is excluded by !**/*.sum
  • vendor/github.com/go-logr/logr/.golangci.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/go-logr/logr/funcr/funcr.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/format/format.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/gomega_dsl.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/internal/assertion.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/internal/async_assertion.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/internal/duration_bundle.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/internal/gomega.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/internal/polling_signal_error.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/internal/vetoptdesc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/and.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/assignable_to_type_of_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_a_directory.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_a_regular_file.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_an_existing_file.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_closed_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_comparable_to_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_element_of_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_empty_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_equivalent_to_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_false_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_identical_to.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_key_of_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_nil_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_numerically_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_sent_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_temporally_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_true_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/be_zero_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/consist_of.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/contain_element_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/contain_elements_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/contain_substring_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/equal_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_cap_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_each_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_exact_elements.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_existing_field_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_field.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_http_body_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_http_header_with_value_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_http_status_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_key_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_key_with_value_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_len_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_occurred_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_prefix_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_suffix_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/have_value.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/internal/miter/type_support_iter.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/internal/miter/type_support_noiter.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/match_error_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/match_json_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/match_regexp_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/match_xml_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/match_yaml_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/not.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/or.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/panic_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/receive_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/satisfy_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/semi_structured_data_support.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/succeed_matcher.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/support/goraph/bipartitegraph/bipartitegraph.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/support/goraph/node/node.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/type_support.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/matchers/with_transform.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/onsi/gomega/types/types.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/types_authentication.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/types_cluster_image_policy.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/types_cluster_version.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/types_feature.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/types_image_policy.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/types_scheduling.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-CustomNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-Default.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-DevPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-OKD.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_00_cluster-version-operator_01_clusterversions-TechPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_apiservers-OKD.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-CustomNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-Default.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-DevPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-OKD.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_authentications-TechPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_clusterimagepolicies-Default.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_clusterimagepolicies-DevPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_clusterimagepolicies-TechPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_clusterimagepolicies.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_featuregates.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagepolicies-Default.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagepolicies-DevPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagepolicies-TechPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_imagepolicies.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_infrastructures-OKD.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_nodes-OKD.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-SelfManagedHA-DevPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-SelfManagedHA-OKD.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.crd-manifests/0000_10_config-operator_01_schedulers-SelfManagedHA-TechPreviewNoUpgrade.crd.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.deepcopy.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.featuregated-crd-manifests.yaml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1/zz_generated.swagger_doc_generated.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1alpha1/types_cluster_image_policy.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1alpha1/types_image_policy.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1alpha1/zz_generated.deepcopy.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/config/v1alpha1/zz_generated.swagger_doc_generated.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/features/features.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/openshift/api/features/util.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/api/client.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/desc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/internal/difflib.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/internal/go_runtime_metrics.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/labels.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/metric.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/process_collector_darwin.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/process_collector_mem_nocgo_darwin.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/process_collector_procfsenabled.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/promhttp/instrument_server.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/vec.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/client_golang/prometheus/wrap.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/config/config.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/config/headers.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/config/http_config.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/expfmt/decode.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/expfmt/encode.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/expfmt/expfmt.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/expfmt/fuzz.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/expfmt/openmetrics_create.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/expfmt/text_create.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/expfmt/text_parse.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/model/alert.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/model/labels.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/model/labelset.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/model/metric.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/model/time.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/model/value.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/model/value_histogram.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/common/model/value_type.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/.golangci.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/Makefile.common is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/arp.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/fs.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/fs_statfs_notype.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/fscache.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/internal/fs/fs.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/internal/util/parse.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/internal/util/sysreadfile.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/mountstats.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/net_dev_snmp6.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/net_ip_socket.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/net_protocols.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/net_tcp.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/net_unix.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_cgroup.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_io.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_netstat.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_smaps.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_snmp.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_snmp6.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_status.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/proc_sys.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/prometheus/procfs/softirqs.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/cobra/.golangci.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/cobra/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/cobra/SECURITY.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/cobra/command.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/cobra/completions.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/bool_func.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/count.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/errors.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/flag.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/func.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/golangflag.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/ipnet_slice.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/string_to_string.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/text.go is excluded by !vendor/**, !**/vendor/**
  • vendor/github.com/spf13/pflag/time.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/attribute/filter.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/attribute/internal/attribute.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/attribute/rawhelpers.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/attribute/value.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/internal/gen.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/internal/rawhelpers.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/trace/auto.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/trace/internal/telemetry/span.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/trace/internal/telemetry/status.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/trace/internal/telemetry/traces.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/trace/internal/telemetry/value.go is excluded by !vendor/**, !**/vendor/**
  • vendor/go.opentelemetry.io/otel/trace/noop.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/crypto/openpgp/s2k/s2k.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/context/context.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/html/escape.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/html/parse.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/html/render.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/config.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/config_go124.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/config_go125.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/config_go126.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/config_pre_go124.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/frame.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/gotrack.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/http2.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/server.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/timer.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/transport.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/writesched.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/writesched_priority_rfc7540.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/writesched_priority_rfc9218.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/http2/writesched_roundrobin.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/internal/httpcommon/request.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/net/trace/events.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/oauth2/clientcredentials/clientcredentials.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/oauth2/internal/doc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/oauth2/internal/oauth2.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/oauth2/internal/token.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/oauth2/internal/transport.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/oauth2/oauth2.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/oauth2/pkce.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/oauth2/token.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/oauth2/transport.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/affinity_linux.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/fdset.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/ifreq_linux.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/mkall.sh is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/mkerrors.sh is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/syscall_linux.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/syscall_netbsd.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_386.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_amd64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_arm.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_arm64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_loong64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_mips.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_mips64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_mips64le.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_mipsle.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_ppc.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_ppc64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_ppc64le.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_riscv64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_s390x.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zerrors_linux_sparc64.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/zsyscall_linux.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/ztypes_linux.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/unix/ztypes_netbsd_arm.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/windows/syscall_windows.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/windows/types_windows.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/sys/windows/zsyscall_windows.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/term/terminal.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/text/encoding/japanese/eucjp.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/text/encoding/japanese/iso2022jp.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/text/encoding/japanese/shiftjis.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/text/encoding/korean/euckr.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/text/encoding/simplifiedchinese/gbk.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/text/encoding/simplifiedchinese/hzgb2312.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/text/encoding/traditionalchinese/big5.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/text/encoding/unicode/unicode.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/text/unicode/bidi/core.go is excluded by !vendor/**, !**/vendor/**
  • vendor/golang.org/x/tools/go/ast/inspector/cursor.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/genproto/googleapis/rpc/status/status.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/encoding/protowire/wire.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/editiondefaults/editions_defaults.binpb is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/filedesc/editions.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/filedesc/presence.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/genid/api_gen.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/genid/descriptor_gen.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/impl/codec_message_opaque.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/impl/message_opaque.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/impl/presence.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/strs/strings_unsafe.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/strs/strings_unsafe_go120.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/internal/version/version.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/proto/merge.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/reflect/protoreflect/source_gen.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/reflect/protoreflect/value_unsafe_go120.go is excluded by !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/types/descriptorpb/descriptor.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/types/gofeaturespb/go_features.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/types/known/anypb/any.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/types/known/durationpb/duration.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/types/known/emptypb/empty.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/types/known/structpb/struct.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/types/known/timestamppb/timestamp.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**
  • vendor/google.golang.org/protobuf/types/known/wrapperspb/wrappers.pb.go is excluded by !**/*.pb.go, !vendor/**, !**/vendor/**
  • vendor/gopkg.in/evanphx/json-patch.v4/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/gopkg.in/evanphx/json-patch.v4/patch.go is excluded by !vendor/**, !**/vendor/**
  • vendor/gopkg.in/yaml.v2/.travis.yml is excluded by !vendor/**, !**/vendor/**
  • vendor/gopkg.in/yaml.v2/LICENSE is excluded by !vendor/**, !**/vendor/**
  • vendor/gopkg.in/yaml.v2/LICENSE.libyaml is excluded by !vendor/**, !**/vendor/**
  • vendor/gopkg.in/yaml.v2/README.md is excluded by !vendor/**, !**/vendor/**
  • vendor/gopkg.in/yaml.v2/apic.go is excluded by !vendor/**, !**/vendor/**
  • vendor/gopkg.in/yaml.v2/decode.go is excluded by !vendor/**, !**/vendor/**
📒 Files selected for processing (1)
  • go.mod
🧰 Additional context used
📓 Path-based instructions (1)
**

⚙️ CodeRabbit configuration file

-Focus on major issues impacting performance, readability, maintainability and security. Avoid nitpicks and avoid verbosity.

Files:

  • go.mod
🔇 Additional comments (2)
go.mod (2)

24-25: Security status confirmed for golang.org/x/crypto v0.46.0 and golang.org/x/net v0.48.0. Both versions are free from known vulnerabilities and include necessary security patches. The version updates appropriately address recent security disclosures.


28-34: The k8s.io package upgrade from v0.34.x to v0.35.0 appears compatible with the codebase. Code analysis shows the cluster-version-operator uses standard client-go APIs (List operations, typed clients for CoreV1, BatchV1, etc.) in patterns compatible with v0.35.0. No breaking API changes in client-go v0.35.0 were identified that would affect this code.

module github.com/openshift/cluster-version-operator

go 1.24.0
go 1.25.0
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

Go 1.25.0 release date stable

💡 Result:

Go 1.25.0 (stable) was released on August 12, 2025. [1][2]

Sources:
[1] Go Release History — go.dev.
[2] "Go 1.25 is released" — The Go Blog.


🌐 Web query:

Go 1.25.0 security advisories known issues

💡 Result:

Short summary — known security issues affecting Go 1.25.0 (fixed in later 1.25.x releases, see notes):

  • CVE-2025-58185 — encoding/asn1: unvalidated DER parsing can pre-allocate memory and lead to memory exhaustion (DoS). Fixed in 1.25.2. [1]
  • CVE-2025-58183 — archive/tar: tar.Reader can allocate unbounded memory when parsing sparse regions (OOM DoS). Fixed in 1.25.2. [2]
  • CVE-2025-58186 — net/http: cookie parsing could be abused to exhaust memory by sending many cookies. Fixed in 1.25.2. [3]
  • CVE-2025-58188 — crypto/x509: certificate chain validation panic when encountering DSA public keys (availability impact). Fixed in 1.25.2. [4]
  • CVE-2025-58189 — crypto/tls: ALPN handshake error can include unescaped attacker-controlled data in server error messages (information leakage / DoS vector). Fixed in 1.25.2. [5]
  • CVE-2025-61724 — net/textproto: Reader.ReadResponse uses repeated concatenation and can cause excessive CPU usage on many-line responses. Fixed in 1.25.2. [6]

Recommendation: upgrade any systems using Go 1.25.0 to the patched release (1.25.2 or later) and rebuild binaries that embed the toolchain. [2][4]

Sources:
[1] Wiz — CVE-2025-58185.
[2] Wiz — CVE-2025-58183.
[3] Wiz — CVE-2025-58186.
[4] Wiz — CVE-2025-58188.
[5] Wiz — CVE-2025-58189.
[6] Wiz — CVE-2025-61724.


🌐 Web query:

Go programming language version 1.25 release

💡 Result:

Go 1.25 was released on August 12, 2025. Key highlights include toolchain and runtime improvements, DWARF‑5 debug output and linker size/time options, stricter nil‑check semantics (spec enforcement), the graduated testing/synctest package, an experimental encoding/json/v2 behind GOEXPERIMENT=jsonv2, new vet analyzers, and other standard‑library and go command enhancements. [1][2]

Sources:
[1] Go Blog — “Go 1.25 is released” (Aug 12, 2025).
[2] Go 1.25 Release Notes (go.dev/doc/go1.25).


Upgrade Go to 1.25.2 or later—Go 1.25.0 has critical security vulnerabilities.

Go 1.25.0 contains six known CVEs (all fixed in 1.25.2+):

Rebuild with Go 1.25.2 or later.

🤖 Prompt for AI Agents
In @go.mod at line 3, The go version in the module directive ("go 1.25.0") is
vulnerable; update the module directive value from "go 1.25.0" to "go 1.25.2"
(or later) in the go.mod so the project is built with a Go release that includes
CVE fixes and then rebuild CI/artifacts with the new toolchain; ensure any build
matrices or Dockerfiles that pin Go are also updated to the same minimum
version.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Fix all issues with AI agents
In @.ci-operator.yaml:
- Around line 1-4: Update the FROM line in Dockerfile.rhel so the builder image
matches Go 1.25 used in go.mod and .ci-operator.yaml: replace the existing
rhel-9-golang-1.24-openshift-4.21 builder reference with the
rhel-9-golang-1.25-openshift-4.22 builder (the first FROM in Dockerfile.rhel /
the builder stage) to ensure CI and Docker build environments are consistent.
📜 Review details

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Cache: Disabled due to data retention organization setting

Knowledge base: Disabled due to Reviews -> Disable Knowledge Base setting

📥 Commits

Reviewing files that changed from the base of the PR and between 12582e2 and 5c4fdf3.

📒 Files selected for processing (1)
  • .ci-operator.yaml

Comment on lines 1 to +4
build_root_image:
name: release
namespace: openshift
tag: rhel-9-release-golang-1.24-openshift-4.21
tag: rhel-9-release-golang-1.25-openshift-4.22
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

# Check for go.mod or go.sum to find Go version
fd -e mod -e sum | head -20

Repository: openshift/cluster-version-operator

Length of output: 91


🏁 Script executed:

# Search for Go version references in the codebase
rg "go.*1\.(2[4-5]|23)" -t go -t yaml -t dockerfile --max-count=20

Repository: openshift/cluster-version-operator

Length of output: 112


🏁 Script executed:

# Look at the git log for recent changes and commit messages
git log --oneline -20

Repository: openshift/cluster-version-operator

Length of output: 111


🏁 Script executed:

# Check if there are other references to golang image versions
rg "golang-1\.(2[3-5])" --max-count=20

Repository: openshift/cluster-version-operator

Length of output: 181


🏁 Script executed:

# Check the Go version in go.mod
head -20 go.mod

Repository: openshift/cluster-version-operator

Length of output: 882


🏁 Script executed:

# Check what files were changed in this commit
git diff-tree --no-commit-id --name-only -r HEAD

Repository: openshift/cluster-version-operator

Length of output: 60


🏁 Script executed:

# Check if Dockerfile.rhel has changes
git show HEAD:Dockerfile.rhel | head -20

Repository: openshift/cluster-version-operator

Length of output: 939


🏁 Script executed:

# Get the full diff for .ci-operator.yaml to see exact changes
git show HEAD:.ci-operator.yaml 2>/dev/null || cat .ci-operator.yaml

Repository: openshift/cluster-version-operator

Length of output: 183


🏁 Script executed:

# Check if there are any staged or uncommitted changes for Dockerfile.rhel
git status | grep -i dockerfile

Repository: openshift/cluster-version-operator

Length of output: 60


🏁 Script executed:

# Check the git log to see if Dockerfile.rhel was modified in related commits
git log --oneline --all -- Dockerfile.rhel | head -10

Repository: openshift/cluster-version-operator

Length of output: 1398


🏁 Script executed:

# Search for all Dockerfile variants that might need updating
fd -t f "Dockerfile*"

Repository: openshift/cluster-version-operator

Length of output: 93


🏁 Script executed:

# Check what files are in the current commit (HEAD)
git diff HEAD~1 HEAD --name-only

Repository: openshift/cluster-version-operator

Length of output: 266


🏁 Script executed:

# Show the actual diff for this commit to see exactly what changed
git diff HEAD~1 HEAD

Repository: openshift/cluster-version-operator

Length of output: 266


🏁 Script executed:

# Check the actual current HEAD and git status
git status
git log --oneline -5

Repository: openshift/cluster-version-operator

Length of output: 241


🏁 Script executed:

# Try to see the full commit for the current HEAD
git show HEAD

Repository: openshift/cluster-version-operator

Length of output: 50395


Update Dockerfile.rhel to use Go 1.25-based builder image.

The .ci-operator.yaml change to rhel-9-release-golang-1.25-openshift-4.22 must be paired with a corresponding update to Dockerfile.rhel. Currently, Dockerfile.rhel still references the 1.24-based builder image (rhel-9-golang-1.24-openshift-4.21), creating a mismatch:

  • go.mod declares Go 1.25.0
  • .ci-operator.yaml provides Go 1.25 in CI build environment
  • Dockerfile.rhel still builds with Go 1.24

Update the FROM statement in Dockerfile.rhel line 1 to use the matching 1.25-based image:

FROM registry.ci.openshift.org/ocp/builder:rhel-9-golang-1.25-openshift-4.22 AS builder
🤖 Prompt for AI Agents
In @.ci-operator.yaml around lines 1 - 4, Update the FROM line in
Dockerfile.rhel so the builder image matches Go 1.25 used in go.mod and
.ci-operator.yaml: replace the existing rhel-9-golang-1.24-openshift-4.21
builder reference with the rhel-9-golang-1.25-openshift-4.22 builder (the first
FROM in Dockerfile.rhel / the builder stage) to ensure CI and Docker build
environments are consistent.

@openshift-ci
Copy link
Contributor

openshift-ci bot commented Jan 12, 2026

@hongkailiu: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/okd-scos-images 5c4fdf3 link true /test okd-scos-images
ci/prow/e2e-agnostic-operator 5c4fdf3 link true /test e2e-agnostic-operator
ci/prow/e2e-aws-ovn-techpreview 5c4fdf3 link true /test e2e-aws-ovn-techpreview
ci/prow/unit 5c4fdf3 link true /test unit
ci/prow/images 5c4fdf3 link true /test images
ci/prow/e2e-agnostic-ovn-upgrade-into-change 5c4fdf3 link true /test e2e-agnostic-ovn-upgrade-into-change
ci/prow/e2e-hypershift-conformance 5c4fdf3 link true /test e2e-hypershift-conformance
ci/prow/e2e-hypershift 5c4fdf3 link true /test e2e-hypershift
ci/prow/lint 5c4fdf3 link true /test lint
ci/prow/e2e-agnostic-ovn-upgrade-out-of-change 5c4fdf3 link true /test e2e-agnostic-ovn-upgrade-out-of-change
ci/prow/e2e-agnostic-ovn 5c4fdf3 link true /test e2e-agnostic-ovn

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant