From 2d60e15865339bf82a9fb12004c7397f3ca6fc72 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 13 May 2026 23:45:23 -0700 Subject: [PATCH 1/4] chore: bump step-security/harden-runner from 2.19.0 to 2.19.1 (#700) Bumps [step-security/harden-runner](https://github.com/step-security/harden-runner) from 2.19.0 to 2.19.1. - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/8d3c67de8e2fe68ef647c8db1e6a09f647780f40...a5ad31d6a139d249332a2605b85202e8c0b78450) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.19.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- .github/workflows/codespell.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/codespell.yml b/.github/workflows/codespell.yml index eda29e860..e00e92948 100644 --- a/.github/workflows/codespell.yml +++ b/.github/workflows/codespell.yml @@ -12,7 +12,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Harden Runner - uses: step-security/harden-runner@8d3c67de8e2fe68ef647c8db1e6a09f647780f40 # v2.19.0 + uses: step-security/harden-runner@a5ad31d6a139d249332a2605b85202e8c0b78450 # v2.19.1 with: egress-policy: audit From f93a1cb079a4ce4b4ea1e1478d7e53cf2383d6a8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 14 May 2026 15:13:43 -0700 Subject: [PATCH 2/4] chore: bump oss/go/microsoft/golang from 1.25.9 to 1.25.10 in /docker (#712) --- .github/workflows/ci.yml | 2 +- .github/workflows/code-lint.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/trivy.yml | 2 +- .github/workflows/upgrade.yml | 2 +- .golangci.yml | 2 +- docker/hub-agent.Dockerfile | 2 +- docker/member-agent.Dockerfile | 2 +- docker/refresh-token.Dockerfile | 2 +- go.mod | 2 +- 10 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 9b58b4af9..adffaeeee 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -13,7 +13,7 @@ on: paths-ignore: [docs/**, "**.md", "**.mdx", "**.png", "**.jpg"] env: - GO_VERSION: '1.25.9' + GO_VERSION: '1.25.10' CERT_MANAGER_VERSION: 'v1.16.2' jobs: diff --git a/.github/workflows/code-lint.yml b/.github/workflows/code-lint.yml index e3ceb5da1..d6a977d52 100644 --- a/.github/workflows/code-lint.yml +++ b/.github/workflows/code-lint.yml @@ -14,7 +14,7 @@ on: env: # Common versions - GO_VERSION: "1.25.9" + GO_VERSION: "1.25.10" jobs: detect-noop: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6709caf80..2606cdf4b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -20,7 +20,7 @@ env: HUB_AGENT_IMAGE_NAME: hub-agent MEMBER_AGENT_IMAGE_NAME: member-agent REFRESH_TOKEN_IMAGE_NAME: refresh-token - GO_VERSION: "1.25.9" + GO_VERSION: "1.25.10" jobs: export-registry: diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml index a39f6b32c..c9bdf9706 100644 --- a/.github/workflows/trivy.yml +++ b/.github/workflows/trivy.yml @@ -18,7 +18,7 @@ env: MEMBER_AGENT_IMAGE_NAME: member-agent REFRESH_TOKEN_IMAGE_NAME: refresh-token - GO_VERSION: '1.25.9' + GO_VERSION: '1.25.10' jobs: export-registry: diff --git a/.github/workflows/upgrade.yml b/.github/workflows/upgrade.yml index 3f17aa911..8d3765798 100644 --- a/.github/workflows/upgrade.yml +++ b/.github/workflows/upgrade.yml @@ -17,7 +17,7 @@ on: paths-ignore: [docs/**, "**.md", "**.mdx", "**.png", "**.jpg"] env: - GO_VERSION: '1.25.9' + GO_VERSION: '1.25.10' jobs: detect-noop: diff --git a/.golangci.yml b/.golangci.yml index afad58749..73c1e09ff 100644 --- a/.golangci.yml +++ b/.golangci.yml @@ -1,6 +1,6 @@ run: timeout: 15m - go: '1.25.9' + go: '1.25.10' linters-settings: stylecheck: diff --git a/docker/hub-agent.Dockerfile b/docker/hub-agent.Dockerfile index 2410a0312..db973b1c2 100644 --- a/docker/hub-agent.Dockerfile +++ b/docker/hub-agent.Dockerfile @@ -1,5 +1,5 @@ # Build the hubagent binary -FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.9 AS builder +FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.10 AS builder ARG GOOS=linux ARG GOARCH=amd64 diff --git a/docker/member-agent.Dockerfile b/docker/member-agent.Dockerfile index f851a2c0a..806d18e41 100644 --- a/docker/member-agent.Dockerfile +++ b/docker/member-agent.Dockerfile @@ -1,5 +1,5 @@ # Build the memberagent binary -FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.9 AS builder +FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.10 AS builder ARG GOOS=linux ARG GOARCH=amd64 diff --git a/docker/refresh-token.Dockerfile b/docker/refresh-token.Dockerfile index 22b99f038..2d9972b70 100644 --- a/docker/refresh-token.Dockerfile +++ b/docker/refresh-token.Dockerfile @@ -1,5 +1,5 @@ # Build the refreshtoken binary -FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.9 AS builder +FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.10 AS builder ARG GOOS="linux" ARG GOARCH="amd64" diff --git a/go.mod b/go.mod index 1b36cfd48..0a78c1f8a 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/kubefleet-dev/kubefleet -go 1.25.9 +go 1.25.10 require ( github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.0 From ced31a4457f7ee3c55d5bb704590f489a306eb3b Mon Sep 17 00:00:00 2001 From: michaelawyu Date: Fri, 15 May 2026 09:07:43 +1000 Subject: [PATCH 3/4] fix: drop hard-coded package name in the UTs of the new error handling package (#709) --- pkg/utils/errors/errors_test.go | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/pkg/utils/errors/errors_test.go b/pkg/utils/errors/errors_test.go index 95d406477..d026b56c8 100644 --- a/pkg/utils/errors/errors_test.go +++ b/pkg/utils/errors/errors_test.go @@ -94,7 +94,8 @@ func TestCommonUsePatterns(t *testing.T) { "errCategory=unexpected", "k1=v1", "callers=", - "Function:github.com/kubefleet-dev/kubefleet/pkg/utils/errors.TestCommonUsePatterns", + "Function:", + "/pkg/utils/errors.TestCommonUsePatterns", "k2=v2", } for _, subStr := range wantSubStrings { @@ -557,7 +558,7 @@ func TestNewUnexpectedError(t *testing.T) { // Verify the first frame (the current test code). callerFunc := frames[0].Function - if callerFunc != "github.com/kubefleet-dev/kubefleet/pkg/utils/errors.TestNewUnexpectedError" { + if !strings.Contains(callerFunc, "/pkg/utils/errors.TestNewUnexpectedError") { t.Errorf("NewUnexpectedError() first caller function = %s, want TestNewUnexpectedError", callerFunc) } callerFile := frames[0].File From 29e78c3efbbeb559a2f48b57d011e9c9b057441a Mon Sep 17 00:00:00 2001 From: Britania Rodriguez Reyes Date: Thu, 14 May 2026 16:37:20 -0700 Subject: [PATCH 4/4] update crd-intsaller to 1.25.10 Signed-off-by: Britania Rodriguez Reyes --- docker/crd-installer.Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docker/crd-installer.Dockerfile b/docker/crd-installer.Dockerfile index a8355aa8a..a4f3f6272 100644 --- a/docker/crd-installer.Dockerfile +++ b/docker/crd-installer.Dockerfile @@ -1,5 +1,5 @@ # Build the crdinstaller binary -FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.9 AS builder +FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.10 AS builder ARG GOOS=linux ARG GOARCH=amd64