Dependency update - Golang 1.25.1

[liggitt]

Tracking info

Link to any previous tracking issue: #3772

Golang mailing list announcement:

SIG Release Slack thread:

---

Work items for go1.25rc1

Golang mailing list announcement: https://groups.google.com/g/golang-announce/c/dlbl6lgfVX0/m/aD6Br_YFBgAJ

• kube-cross, go-runner, releng-ci image updates: golang: Build 1.25rc1 images #4042

  • kube-cross image promotion: Image promotion for build-image v1.34.0-go1.25rc1-bullseye.0 k8s.io#8216
  • go-runner image promotion: Image promotion for build-image v2.4.0-go1.25rc1-bookworm.0 k8s.io#8217
  • releng-ci image promotion: not promoting this image

After go-runner image promotion

• distroless-iptables image update: build distroless-iptables with go1.25rc1 #4047

  • image promotion: Image promotion for build-image v0.8.0 k8s.io#8232

---

Work items for go1.25rc2

Golang mailing list announcement: https://groups.google.com/g/golang-announce/c/VDM1-NOZTQM/m/xDmH3HCCBQAJ

• kube-cross, go-runner, releng-ci image updates: golang: Build 1.25rc2 images #4061

  • kube-cross image promotion: Image promotion for build-image v1.34.0-go1.25rc2-bullseye.0 k8s.io#8307
  • go-runner image promotion: Image promotion for build-image v2.4.0-go1.25rc2-bookworm.0 k8s.io#8308
  • releng-ci image promotion: not promoting this image

After go-runner image promotion

• distroless-iptables image update: build distroless-iptables with go1.25rc2 #4067

  • image promotion: Image promotion for build-image v0.8.1 k8s.io#8311

---

Work items for Go 1.25.0

Golang mailing list announcement: https://groups.google.com/g/golang-announce/c/BVrdugXW05c/m/ZhFe_4UgAgAJ

• kube-cross, go-runner, releng-ci image updates: golang: Build 1.25.0 images #4094

  • kube-cross image promotion:
  • go-runner image promotion:
  • releng-ci image promotion:

After go-runner image promotion

• distroless-iptables image update:

  • image promotion:

After kube-cross and distroless-iptables image promotions

• kubernetes/kubernetes update (master):

  Ensure the following have been updated within the PR:

  • .go-version file
  • kube-cross image
  • go-runner image
  • distroless-iptables image
  • publishing bot rules
  • test image
  • go.mod go directive versions (this can be done in a second separate PR if needed)

Note
This update may require an update to go.sum files, for example: kubernetes/kubernetes#118507
This will require an API Review approval.

After kubernetes/kubernetes (master) has been updated

• k8s-cloud-builder and k8s-ci-builder image updates:

• kubekins/krte image variants update:

Follow-up items

• Ensure the Golang issue template is updated with any new requirements
  • Add an item to track updating go.mod go directive versions in k/k master

/assign
cc: @kubernetes/release-engineering

[liggitt]

Tracking PRs related to go1.25 that we would need to pick to release branches as part of an eventual update to go1.25:

• Removed parallel execution for test/subtest where AllocsPerRun is used kubernetes#130437

  • 1.32 and earlier: EOL before updating release branches to Go 1.25

• Update to v1.1.4 for golang.org/x/vuln/cmd/govulncheck kubernetes#132820

  • 1.33: [release-1.33] Bump to go 1.25.8 kubernetes#138151
  • 1.32 and earlier: EOL before updating release branches to Go 1.25

---

Tracking verification of conditions for bumping go1.25 on release branches:

• ~2025-11: ~3 months after go 1.25 release (ETA 2025-08)
• ~2026-01: 1 month after Kubernetes 1.35 release on go1.25 (ETA 2025-12)
• no regressions relative to go 1.24 known to impact Kubernetes
• pass unit and integration tests with both go 1.24 and the original go version for the release branch
  • 1.34: [release-1.34] Bump to go 1.25.8 kubernetes#138150
  • 1.33: [release-1.33] Bump to go 1.25.8 kubernetes#138151
  • 1.32 and earlier: EOL before updating release branches to Go 1.25
• any behavior changes in go 1.25 are mitigated to preserve existing behavior without requiring action by Kubernetes end-users

---

Tracking the PR that actually bumps to go1.25:

• 1.34: [release-1.34] Bump to go 1.25.8 kubernetes#138150
• 1.33: [release-1.33] Bump to go 1.25.8 kubernetes#138151
• 1.32 and earlier: EOL before updating release branches to Go 1.25

[cpanato]

/assign