Bump golang + golangci-lint

Signed-off-by: Sameer <sameer.khan@broadcom.com>

Bump golang 1.25.7

Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>

Bump golang to 1.25.6 to fix CVEs

Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com>

Author: sameerforge

.github/workflows/golangci-lint.yml

@@ -26,7 +26,7 @@ jobs:
         with:
           go-version-file: go.mod
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6.0.1
+        uses: golangci/golangci-lint-action@v7
         with:
-          version: v1.64
+          version: v2.4
           args: -v

.golangci.yml

@@ -1,20 +1,19 @@
 run:
   timeout: 5m
+version: "2"
 linters:
   enable:
     - goheader
     - revive
     - unused
-  disable-all: true
 # all available settings of specific linters
-linters-settings:
-  goheader:
-    values:
-      regexp:
-        copyright-year: 20[0-9][0-9]
-    template-path: code-header-template.txt
+  settings:
+    goheader:
+      values:
+        regexp:
+          copyright-year: 20[0-9][0-9]
+      template-path: code-header-template.txt
 issues:
   max-issues-per-linter: 0
   max-same-issues: 0
-  exclude-use-default: false
   new-from-rev: c1a0a1445615c515f3b6f5006b857b8f426308ef # only enforce for commits after Jan 11 2022, allows us to phase-in godoc compliance

Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM golang:1.24.10 AS deps
+FROM --platform=$BUILDPLATFORM golang:1.25.7 AS deps
 
 ARG TARGETOS TARGETARCH KCTRL_VER=development
 WORKDIR /workspace

cli/go.mod

@@ -1,6 +1,6 @@
 module carvel.dev/kapp-controller/cli
 
-go 1.24.10
+go 1.25.7
 
 require (
 	carvel.dev/kapp-controller v0.59.0

go.mod

@@ -1,9 +1,9 @@
 module carvel.dev/kapp-controller
 
-go 1.24.10
+go 1.25.7
 
 require (
-	carvel.dev/vendir v0.45.0
+	carvel.dev/vendir v0.45.1
 	github.com/fatih/color v1.18.0 // indirect
 	github.com/gogo/protobuf v1.3.2
 	github.com/google/go-cmp v0.6.0 // indirect

go.sum

@@ -1,5 +1,5 @@
-carvel.dev/vendir v0.45.0 h1:OWFKkn6Rfi2zPZKS/z68SeIYGrlSgKBXn4DYR178PGk=
-carvel.dev/vendir v0.45.0/go.mod h1:I3xaoQUBf20tQOjW2A0eXC1Hn94tYCL9VTmWHas4VKE=
+carvel.dev/vendir v0.45.1 h1:vVZjAEZz/j1HVLfm1/avlRF235skXpHFrx77GDqJMgo=
+carvel.dev/vendir v0.45.1/go.mod h1:t7/ulJsKBhyOAFyJUt3m1JyIdyvZsAh8eLGr0n1MiLk=
 cloud.google.com/go v0.60.0/go.mod h1:yw2G51M9IfRboUH61Us8GqCeF1PzPblB823Mn2q2eAU=
 cloud.google.com/go/bigquery v1.3.0/go.mod h1:PjpwJnslEMmckchkHFfq+HTD2DmtT67aNFKH1/VBDHE=
 cloud.google.com/go/bigquery v1.4.0/go.mod h1:S8dzgnTigyfTmLBfrtrhyYhwRxG72rYxvftPBK2Dvzc=