Skip to content

chore(deps): update docker images #880

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
red-hat-konflux wants to merge 4 commits into
base: release-1.5
Choose a base branch
from
Open

chore(deps): update docker images #880

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
82c1fff
chore(deps): update docker images
red-hat-konflux[bot] Oct 27, 2026
34f3f25
ci: upgrade golangci-lint for Go 1.27.3
ompushkara Oct 27, 2026
d7b6699
chore: bump go.mod to go 1.26.10
jourdee-lab Oct 27, 2026
3b0345f
ci: bump golang-cross release image to v1.26.10-0
jourdee-lab Oct 27, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions .github/workflows/golangci-lint.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,7 @@ jobs:
- name: golangci-lint
uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
with:
version: v2.13.2
version: v2.15.0

golangci-test-e2e:
name: lint-test-e2e
Expand All @@ -73,5 +73,5 @@ jobs:
- name: golangci-lint
uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
with:
version: v2.13.2
version: v2.15.0
args: --build-tags e2e ./test
6 changes: 3 additions & 3 deletions .github/workflows/validate-release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -36,9 +36,9 @@ jobs:
steps:
- name: Check Signature
run: |
cosign verify ghcr.io/gythialy/golang-cross:v1.26.3-0@sha256:9f7a53d7205e2f1f2742d624ff0b6e1531e8c22863dfb24ca966be5efbdee48b \
cosign verify ghcr.io/gythialy/golang-cross:v1.26.10-0@sha256:53e3b841a596a80140958b2d672873bc01205a2c32c3b05bd11fb0637bd5f935 \
--certificate-oidc-issuer https://token.actions.githubusercontent.com \
--certificate-identity "https://github.com/gythialy/golang-cross/.github/workflows/release-golang-cross.yml@refs/tags/v1.26.3-0"
--certificate-identity "https://github.com/gythialy/golang-cross/.github/workflows/release-golang-cross.yml@refs/tags/v1.26.10-0"
env:
TUF_ROOT: /tmp

Expand All @@ -51,7 +51,7 @@ jobs:
contents: read

container:
image: ghcr.io/gythialy/golang-cross:v1.26.3-0@sha256:9f7a53d7205e2f1f2742d624ff0b6e1531e8c22863dfb24ca966be5efbdee48b
image: ghcr.io/gythialy/golang-cross:v1.26.10-0@sha256:53e3b841a596a80140958b2d672873bc01205a2c32c3b05bd11fb0637bd5f935
volumes:
- /usr:/host_usr
- /opt:/host_opt
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,4 +15,4 @@

# This is used to we scrap the go version and use in CI to get the latest go version
# and we use dependabot to keep the go version up to date
FROM golang:1.27.0
FROM golang:1.27.3
6 changes: 3 additions & 3 deletions Dockerfile.cli-stack.rh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
FROM registry.redhat.io/ubi9/go-toolset:9.8-1787080706@sha256:71e89a1a51ab32cc30634d89ee4dc8ea40ad9991057fa1eae3b1af32bc7db73f AS build-cross-platform
FROM registry.redhat.io/ubi9/go-toolset:9.8-1792906297@sha256:c51f0f31cbaa7e91dede6013f636d54fe10dd7d581cfc4cda014ba9d62bcd779 AS build-cross-platform
ENV APP_ROOT=/opt/app-root \
GOPATH=/opt/app-root

Expand All @@ -18,7 +18,7 @@ FROM --platform=linux/arm64 quay.io/securesign/cli-cosign@sha256:113e44365c0b2
FROM --platform=linux/ppc64le quay.io/securesign/cli-cosign@sha256:09b8885e7568870b03d8899d45c6ab8083fc849391630f3bbf186a7cc0f9773c AS build-ppc64le
FROM --platform=linux/s390x quay.io/securesign/cli-cosign@sha256:834c3f2bb58be7e591760f3b28d0c34bc92d6f01cba374f7b5c51c275ab56d4b AS build-s390x

FROM registry.redhat.io/ubi9/go-toolset:9.8-1787080706@sha256:71e89a1a51ab32cc30634d89ee4dc8ea40ad9991057fa1eae3b1af32bc7db73f AS packager
FROM registry.redhat.io/ubi9/go-toolset:9.8-1792906297@sha256:c51f0f31cbaa7e91dede6013f636d54fe10dd7d581cfc4cda014ba9d62bcd779 AS packager
USER root
RUN mkdir -p /binaries

Expand Down Expand Up @@ -55,7 +55,7 @@ RUN tar -czf /binaries/cosign_windows_amd64.tar.gz -C /tmp cosign.exe && \
RUN chmod -R a+rX /binaries

# Final minimal image with all binaries
FROM registry.redhat.io/ubi9/ubi-micro:9.8-1786321990@sha256:7e7f79ab747bf2b452e3043dd89f388e92be4c7fdcc8b815b58adf6c99c39c95
FROM registry.redhat.io/ubi9/ubi-micro:9.8-1791895366@sha256:5be877a2a280ae36eb9ab80ca4efb28bbf77c57abbba38137cdc37a03b8465e6

LABEL description="Flat image containing cosign CLI binaries for all platforms and architectures"
LABEL io.k8s.description="Flat image containing cosign CLI binaries for all platforms and architectures"
Expand Down
4 changes: 2 additions & 2 deletions Dockerfile.conforma-cli-stack.rh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ FROM --platform=linux/ppc64le quay.io/redhat-user-workloads/rhtap-contract-tenan
FROM --platform=linux/s390x quay.io/redhat-user-workloads/rhtap-contract-tenant/ec-v08/cli-v08@sha256:3e332ca617d16249f803e2eb1918189a5cc8ab1275bb03a5e8dbe3d0d329cd4f AS build-s390x


FROM registry.redhat.io/ubi9/go-toolset:9.8-1787080706@sha256:71e89a1a51ab32cc30634d89ee4dc8ea40ad9991057fa1eae3b1af32bc7db73f AS packager
FROM registry.redhat.io/ubi9/go-toolset:9.8-1792906297@sha256:c51f0f31cbaa7e91dede6013f636d54fe10dd7d581cfc4cda014ba9d62bcd779 AS packager
USER root
RUN mkdir -p /binaries

Expand Down Expand Up @@ -49,7 +49,7 @@ RUN gzip -d /tmp/ec_windows_amd64.exe.gz && \
rm /tmp/ec_windows_amd64.exe

# Final minimal image with all binaries
FROM registry.redhat.io/ubi9/ubi-minimal@sha256:8eb2830d0936237fc13a1f2f7e45aecf90d69043380ad167fad0343632937f41
FROM registry.redhat.io/ubi9/ubi-minimal@sha256:6f3a78179e0b30b930a186e7f68a4af52e51bb82406c9653be10bddd624e40f5

LABEL description="Flat image containing Conforma CLI binaries for all platforms and architectures"
LABEL io.k8s.description="Flat image containing Conforma CLI binaries for all platforms and architectures"
Expand Down
4 changes: 2 additions & 2 deletions Dockerfile.cosign.rh
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
# Build stage
FROM registry.redhat.io/ubi9/go-toolset:9.8-1787080706@sha256:71e89a1a51ab32cc30634d89ee4dc8ea40ad9991057fa1eae3b1af32bc7db73f AS build-env
FROM registry.redhat.io/ubi9/go-toolset:9.8-1792906297@sha256:c51f0f31cbaa7e91dede6013f636d54fe10dd7d581cfc4cda014ba9d62bcd779 AS build-env

WORKDIR /cosign
COPY . .
Expand All @@ -12,7 +12,7 @@ RUN git config --global --add safe.directory /cosign && \
git update-index --no-assume-unchanged Dockerfile.cosign.rh

# Install Cosign
FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:8eb2830d0936237fc13a1f2f7e45aecf90d69043380ad167fad0343632937f41
FROM registry.access.redhat.com/ubi9/ubi-minimal@sha256:6f3a78179e0b30b930a186e7f68a4af52e51bb82406c9653be10bddd624e40f5

LABEL description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices."
LABEL io.k8s.description="Cosign is a container signing tool that leverages simple, secure, and auditable signatures based on simple primitives and best practices."
Expand Down
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
module github.com/sigstore/cosign/v3

go 1.26.3
go 1.26.10

require (
cuelang.org/go v0.16.0
Expand Down
Loading