diff --git a/charts/values.global.yaml b/charts/values.global.yaml index ac5c3ff138..d08ed07433 100644 --- a/charts/values.global.yaml +++ b/charts/values.global.yaml @@ -21,7 +21,7 @@ images: # NOTE: All tags have to be quoted otherwise they might be treated as a number. bash: image: gke.gcr.io/gke-distroless/bash - tag: gke_distroless_20260207.00_p0 + tag: gke_distroless_20260601.00_p0 alertmanager: image: gke.gcr.io/prometheus-engine/alertmanager tag: "v0.27.0-gmp.5-gke.0" diff --git a/cmd/config-reloader/Dockerfile b/cmd/config-reloader/Dockerfile index b137e65636..7366685ad3 100644 --- a/cmd/config-reloader/Dockerfile +++ b/cmd/config-reloader/Dockerfile @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.3@sha256:3e25fdade56f35be3bca41f8a141a66ca834f1c01fdf55414d4a1e1c987a985c AS buildbase +FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS buildbase ARG TARGETOS ARG TARGETARCH WORKDIR /app diff --git a/cmd/datasource-syncer/Dockerfile b/cmd/datasource-syncer/Dockerfile index 7fb65d3ad6..c4fe709964 100644 --- a/cmd/datasource-syncer/Dockerfile +++ b/cmd/datasource-syncer/Dockerfile @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.3@sha256:3e25fdade56f35be3bca41f8a141a66ca834f1c01fdf55414d4a1e1c987a985c AS buildbase +FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS buildbase ARG TARGETOS ARG TARGETARCH WORKDIR /app diff --git a/cmd/frontend/Dockerfile b/cmd/frontend/Dockerfile index 660dc451f5..48820096a6 100644 --- a/cmd/frontend/Dockerfile +++ b/cmd/frontend/Dockerfile @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.3@sha256:3e25fdade56f35be3bca41f8a141a66ca834f1c01fdf55414d4a1e1c987a985c AS buildbase +FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS buildbase # Compile the UI assets. FROM --platform=$BUILDPLATFORM us-central1-docker.pkg.dev/serverless-runtimes/google-24-full/runtimes/nodejs24@sha256:bfc337c809a244fc89f95aae1df974e5c23190b2dbe7c44ce362106ba4af05d8 AS assets diff --git a/cmd/operator/Dockerfile b/cmd/operator/Dockerfile index 0fcfdd9860..87e983a36e 100644 --- a/cmd/operator/Dockerfile +++ b/cmd/operator/Dockerfile @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.3@sha256:3e25fdade56f35be3bca41f8a141a66ca834f1c01fdf55414d4a1e1c987a985c AS buildbase +FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS buildbase ARG TARGETOS ARG TARGETARCH WORKDIR /app diff --git a/cmd/rule-evaluator/Dockerfile b/cmd/rule-evaluator/Dockerfile index c4cd37c21f..d5a2970e49 100644 --- a/cmd/rule-evaluator/Dockerfile +++ b/cmd/rule-evaluator/Dockerfile @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.3@sha256:3e25fdade56f35be3bca41f8a141a66ca834f1c01fdf55414d4a1e1c987a985c AS buildbase +FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS buildbase ARG TARGETOS ARG TARGETARCH WORKDIR /app diff --git a/examples/instrumentation/go-synthetic/Dockerfile b/examples/instrumentation/go-synthetic/Dockerfile index cc87561ced..93d16adef8 100644 --- a/examples/instrumentation/go-synthetic/Dockerfile +++ b/examples/instrumentation/go-synthetic/Dockerfile @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.3@sha256:3e25fdade56f35be3bca41f8a141a66ca834f1c01fdf55414d4a1e1c987a985c AS buildbase +FROM --platform=$BUILDPLATFORM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS buildbase ARG TARGETOS ARG TARGETARCH WORKDIR /app diff --git a/go.mod b/go.mod index 25cb984f8a..ae0cc8bbed 100644 --- a/go.mod +++ b/go.mod @@ -160,7 +160,7 @@ require ( go.uber.org/multierr v1.11.0 // indirect go.yaml.in/yaml/v2 v2.4.2 // indirect go.yaml.in/yaml/v3 v3.0.4 // indirect - golang.org/x/crypto v0.51.0 // indirect + golang.org/x/crypto v0.52.0 // indirect golang.org/x/exp v0.0.0-20250819193227-8b4c13bb791b // indirect golang.org/x/net v0.55.0 // indirect golang.org/x/sync v0.20.0 // indirect diff --git a/go.sum b/go.sum index 1ed6c218ca..f413a04782 100644 --- a/go.sum +++ b/go.sum @@ -453,8 +453,8 @@ golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDf golang.org/x/crypto v0.23.0/go.mod h1:CKFgDieR+mRhux2Lsu27y0fO304Db0wZe70UKqHu0v8= golang.org/x/crypto v0.24.0/go.mod h1:Z1PMYSOR5nyMcyAVAIQSKCDwalqy85Aqn1x3Ws4L5DM= golang.org/x/crypto v0.30.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= -golang.org/x/crypto v0.51.0 h1:IBPXwPfKxY7cWQZ38ZCIRPI50YLeevDLlLnyC5wRGTI= -golang.org/x/crypto v0.51.0/go.mod h1:8AdwkbraGNABw2kOX6YFPs3WM22XqI4EXEd8g+x7Oc8= +golang.org/x/crypto v0.52.0 h1:RMs7fP2rXdep0CftQlK8Uf+kibLm7qkCcradZWYz988= +golang.org/x/crypto v0.52.0/go.mod h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc= golang.org/x/exp v0.0.0-20250819193227-8b4c13bb791b h1:DXr+pvt3nC887026GRP39Ej11UATqWDmWuS99x26cD0= golang.org/x/exp v0.0.0-20250819193227-8b4c13bb791b/go.mod h1:4QTo5u+SEIbbKW1RacMZq1YEfOBqeXa19JeshGi+zc4= golang.org/x/mod v0.2.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= diff --git a/hack/Dockerfile b/hack/Dockerfile index 4b0e38c4bc..7ca2ec1a5e 100644 --- a/hack/Dockerfile +++ b/hack/Dockerfile @@ -14,7 +14,7 @@ # hermetic is a lite copy of the repo resources used in building # testing in a hermetic, idempotent, and reproducable environment. -FROM google-go.pkg.dev/golang:1.26.3@sha256:3e25fdade56f35be3bca41f8a141a66ca834f1c01fdf55414d4a1e1c987a985c AS hermetic +FROM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS hermetic ARG RUNCMD='go fmt ./...' WORKDIR /workspace @@ -64,7 +64,7 @@ COPY --from=hermetic /workspace/hack hack COPY --from=hermetic /workspace/tools tools ## kindtest image for running tests against kind cluster in hermetic environment. -FROM google-go.pkg.dev/golang:1.26.3@sha256:3e25fdade56f35be3bca41f8a141a66ca834f1c01fdf55414d4a1e1c987a985c AS buildbase +FROM google-go.pkg.dev/golang:1.26.4@sha256:3444149d0a7e3f7cfb9c2db65f0f75676fe6ad04de3ce72674efb120c08dd1c1 AS buildbase FROM docker:29.5-cli AS docker FROM debian:stable-slim AS kindtest diff --git a/manifests/operator.yaml b/manifests/operator.yaml index da8d181b26..8733971058 100644 --- a/manifests/operator.yaml +++ b/manifests/operator.yaml @@ -359,7 +359,7 @@ spec: priorityClassName: gmp-critical initContainers: - name: config-init - image: gke.gcr.io/gke-distroless/bash:gke_distroless_20260207.00_p0 + image: gke.gcr.io/gke-distroless/bash:gke_distroless_20260601.00_p0 command: ['/bin/bash', '-c', 'touch /prometheus/config_out/config.yaml'] volumeMounts: - name: config-out @@ -666,7 +666,7 @@ spec: priorityClassName: gmp-critical initContainers: - name: config-init - image: gke.gcr.io/gke-distroless/bash:gke_distroless_20260207.00_p0 + image: gke.gcr.io/gke-distroless/bash:gke_distroless_20260601.00_p0 command: ['/bin/bash', '-c', 'touch /prometheus/config_out/config.yaml'] volumeMounts: - name: config-out @@ -838,7 +838,7 @@ spec: automountServiceAccountToken: false initContainers: - name: config-init - image: gke.gcr.io/gke-distroless/bash:gke_distroless_20260207.00_p0 + image: gke.gcr.io/gke-distroless/bash:gke_distroless_20260601.00_p0 command: ['/bin/bash', '-c', 'touch /alertmanager/config_out/config.yaml && echo -e "receivers:\n - name: noop\nroute:\n receiver: noop" > alertmanager/config_out/config.yaml'] volumeMounts: - name: alertmanager-config diff --git a/manifests/rule-evaluator.yaml b/manifests/rule-evaluator.yaml index a5b63873db..3bf580e9f9 100644 --- a/manifests/rule-evaluator.yaml +++ b/manifests/rule-evaluator.yaml @@ -124,7 +124,7 @@ spec: automountServiceAccountToken: true initContainers: - name: config-init - image: gke.gcr.io/gke-distroless/bash:gke_distroless_20260207.00_p0 + image: gke.gcr.io/gke-distroless/bash:gke_distroless_20260601.00_p0 command: ['/bin/bash', '-c', 'touch /prometheus/config_out/config.yaml'] volumeMounts: - name: config-out