Upgrade Go to 1.26.4 and update dependencies and tooling - #1
Merged
Conversation
Bump everything to the newest versions published on or before 2026-06-05 (14-day supply-chain cooldown), excluding anything released more recently. - go.mod: k8s.io/client-go v0.29.2 -> v0.36.1; go directive 1.19 -> 1.26.4 (+ transitive deps via go mod tidy) - .tool-versions: shellcheck 0.9.0 -> 0.11.0, shfmt 3.6.0 -> 3.13.1 - workflows: actions/checkout v4 -> v6, actions/setup-go v5 -> v6 (go-version 1.19 -> 1.26.4), asdf-vm/actions v3 -> v4, github/codeql-action v3 -> v4, golangci-lint-action v4 -> v9, goreleaser-action v5 -> v7 - .goreleaser.yaml: migrate to schema v2 (replacements -> name_template, format -> formats); workflow arg --rm-dist -> --clean - dependabot.yml: add 14-day cooldown so future updates respect the window Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JDmbeSCnw8pbw37WADE9cX
golangci-lint jumped from v1 to v2.12.2 with the action bump, surfacing pre-existing lint issues: - errcheck: check f.Close() error; ignore fmt.Fprintf in flag.Usage - staticcheck ST1023: drop redundant explicit types from var decls Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01JDmbeSCnw8pbw37WADE9cX
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
This PR upgrades the project to Go 1.26.4 and updates all dependencies, GitHub Actions, and development tooling to their latest versions. This includes updates to Kubernetes client libraries, goreleaser configuration for v2 compatibility, and GitHub Actions workflows.
Key Changes
Go and Dependencies
k8s.io/client-gofrom v0.29.2 to v0.36.1k8s.io/apimachineryfrom v0.29.2 to v0.36.1k8s.io/klog/v2from v2.110.1 to v2.140.0github.qkg1.top/fxamacker/cbor/v2,github.com/munnerz/goautoneg,k8s.io/kube-openapi,sigs.k8s.io/randfillgithub.qkg1.top/gogo/protobuf,github.com/golang/protobuf,google.golang.org/appengine,google.golang.org/protobufBuild Configuration
.goreleaser.yamlto v2 format:version: 2declarationreplacementstoname_templatefor archive naming--rm-distto--cleanGitHub Actions
actions/checkoutfrom v4 to v6actions/setup-gofrom v5 to v6goreleaser/goreleaser-actionfrom v5 to v7 with version constraint~> v2github/codeql-action/*from v3 to v4golangci/golangci-lint-actionfrom v4 to v9asdf-vm/actions/*from v3 to v4Development Tools
.tool-versions:shellcheckfrom 0.9.0 to 0.11.0shfmtfrom 3.6.0 to 3.13.1Supply Chain Security
pipandgomodecosystems to allow time for security review before opening PRsNotable Implementation Details
name_templateconfigurationhttps://claude.ai/code/session_01JDmbeSCnw8pbw37WADE9cX