Skip to content

update to go1.25.7, alpine 3.23, xx v1.9.0#4781

Merged
milosgajdos merged 3 commits intodistribution:mainfrom
thaJeztah:update_go
Feb 12, 2026
Merged

update to go1.25.7, alpine 3.23, xx v1.9.0#4781
milosgajdos merged 3 commits intodistribution:mainfrom
thaJeztah:update_go

Conversation

@thaJeztah
Copy link
Copy Markdown
Member

@thaJeztah thaJeztah commented Feb 11, 2026

Dockerfile: update tonistiigi/xx v1.9.0

Also add a well-formatted comment (for outputing in docker build --call=outline .);

docker build -q --call=outline .
BUILD ARG        VALUE                                     DESCRIPTION
GO_VERSION       1.23.7
ALPINE_VERSION   3.21
XX_VERSION       1.9.0                                     version of the tonistiigi/xx utility to use.
PKG              github.com/distribution/distribution/v3
LDFLAGS          -s -w
BUILDTAGS

full diff: tonistiigi/xx@v1.6.1...v1.9.0

update to go1.25.7, alpine 3.23

docker build --progress=none --call=outline .
BUILD ARG        VALUE                                     DESCRIPTION
GO_VERSION       1.25.7                                    sets the version of the golang base image to use.
ALPINE_VERSION   3.23                                      sets the version of the alpine base image to use, including for the golang image.
XX_VERSION       1.9.0                                     sets the version of the tonistiigi/xx utility to use.
PKG              github.com/distribution/distribution/v3
LDFLAGS          -s -w
BUILDTAGS

Also add a well-formatted comment (for outputing in `docker build --call=outline .`);

    docker build -q --call=outline .
    BUILD ARG        VALUE                                     DESCRIPTION
    GO_VERSION       1.23.7
    ALPINE_VERSION   3.21
    XX_VERSION       1.9.0                                     version of the tonistiigi/xx utility to use.
    PKG              github.com/distribution/distribution/v3
    LDFLAGS          -s -w
    BUILDTAGS

full diff: tonistiigi/xx@v1.6.1...v1.9.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@@ -34,7 +34,7 @@ jobs:
matrix:
go:
- 1.23.7
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

we should probably drop support to 1.23 and maintain it for 1.24 🤔

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah, I just realised that updating golang.org/x/crypto (which has some vulnerabilities) forces go1.24 as minimum now, so we have not much choice either way; let me already do so.

go1.23 is EOL since August 2025 (when go1.25 was released), and (indirect)
dependencies start to require it.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
@github-actions github-actions bot added the dependencies Pull requests that update a dependency file label Feb 12, 2026
module github.com/distribution/distribution/v3

go 1.23.7
go 1.24
Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated 👍

Looks like no (indirect) dependency enforced a patch version, so I could drop it for now (go 1.24 instead of go 1.24.0).

@milosgajdos milosgajdos merged commit f5d656e into distribution:main Feb 12, 2026
21 checks passed
@thaJeztah thaJeztah deleted the update_go branch February 12, 2026 12:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/build area/ci dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants