chore: update to go 1.24.6

.github/workflows/azwi-build.yaml

@@ -35,7 +35,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.23"
+          go-version: "1.24"
           check-latest: true
       - name: Build azwi
         run: |

.github/workflows/azwi-e2e.yaml

@@ -33,7 +33,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.23"
+          go-version: "1.24"
           check-latest: true
       - name: Build azwi
         run: |

.github/workflows/codecov.yaml

@@ -21,7 +21,7 @@ jobs:
       - uses: actions/checkout@9bb56186c3b09b4f86b1c65136769dd318469633 # v4.1.2
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "^1.23"
+          go-version: "^1.24"
           check-latest: true
       - name: Run tests
         run: make test

.github/workflows/create-release-pull-request.yaml

@@ -34,7 +34,7 @@ jobs:
           ref: "${{ github.event.inputs.based_on_branch }}"
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.23"
+          go-version: "1.24"
           check-latest: true
       - run: make release-manifest
         env:

.github/workflows/create-release.yaml

@@ -32,7 +32,7 @@ jobs:
           fetch-depth: 0
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.23"
+          go-version: "1.24"
           check-latest: true
       - name: Goreleaser
         uses: goreleaser/goreleaser-action@336e29918d653399e599bfca99fadc1d7ffbc9f7 # v4.3.0

.github/workflows/scan-vulns.yaml

@@ -25,7 +25,7 @@ jobs:
 
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.23"
+          go-version: "1.24"
           check-latest: true
       - uses: golang/govulncheck-action@3a32958c2706f7048305d5a2e53633d7e37e97d0 # v1.0.2
 
@@ -41,7 +41,7 @@ jobs:
 
       - uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
         with:
-          go-version: "1.23"
+          go-version: "1.24"
           check-latest: true
 
       - name: Check out code into the Go module directory

.golangci.yml

@@ -1,6 +1,6 @@
 run:
   deadline: 20m
-  go-version: "1.23"
+  go-version: "1.24"
 
 linters:
   disable-all: true

.pipelines/nightly.yaml

@@ -37,6 +37,9 @@ jobs:
         soak_aks_linux:
           CLUSTER_NAME: "azwi-aks-linux"
     steps:
+      - task: GoTool@0
+        inputs:
+          version: "1.24.6"
       - script: make test-e2e
         displayName: Webhook E2E test suite
         env:
@@ -83,6 +86,9 @@ jobs:
         kind_v1_32_3:
           KIND_NODE_VERSION: v1.32.3
     steps:
+      - task: GoTool@0
+        inputs:
+          version: "1.24.6"
       - script: make test-e2e
         displayName: Webhook E2E test suite
         env:

.pipelines/pr.yaml

@@ -23,6 +23,9 @@ jobs:
     workspace:
       clean: all
     steps:
+      - task: GoTool@0
+        inputs:
+          version: "1.24.6"
       - script: make lint
         displayName: golangci-lint
       - script: make helm-lint
@@ -46,6 +49,9 @@ jobs:
     workspace:
       clean: all
     steps:
+      - task: GoTool@0
+        inputs:
+          version: "1.24.6"
       - script: make test
         displayName: Unit test
   - job: shellcheck
@@ -81,6 +87,9 @@ jobs:
           REGISTRY: upstream.azurecr.io/azure-workload-identity
           GINKGO_SKIP: \[AKSSoakOnly\]
     steps:
+      - task: GoTool@0
+        inputs:
+          version: "1.24.6"
       - script: echo "##vso[task.setvariable variable=CLUSTER_NAME]azwi-e2e-$(openssl rand -hex 2)"
         displayName: Set CLUSTER_NAME
         condition: ne(variables.LOCAL_ONLY, 'true')
@@ -132,6 +141,9 @@ jobs:
           LOCAL_ONLY: "true"
           TEST_HELM_CHART: "true"
     steps:
+      - task: GoTool@0
+        inputs:
+          version: "1.24.6"
       - script: echo "##vso[task.setvariable variable=CLUSTER_NAME]azwi-e2e-$(openssl rand -hex 2)"
         displayName: Set CLUSTER_NAME
         condition: ne(variables.LOCAL_ONLY, 'true')

docker/proxy-init.Dockerfile

@@ -1,4 +1,4 @@
-FROM --platform=${TARGETPLATFORM:-linux/amd64} registry.k8s.io/build-image/distroless-iptables:v0.7.6
+FROM --platform=${TARGETPLATFORM:-linux/amd64} registry.k8s.io/build-image/distroless-iptables:v0.8.1
 
 COPY ./init/init-iptables.sh /bin/
 RUN chmod +x /bin/init-iptables.sh

docker/proxy.Dockerfile

@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.10-bookworm@sha256:1b9955f4f779e11096819e0a2594c9cf568aa2337fea85a45b220bf632376e58 as builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.24.6-bookworm@sha256:b55cd0118651789c1c3623f8d8ba7e9f9e131817ec20af3505ca5410603e47a2 as builder
 
 ARG LDFLAGS
 

docker/webhook.Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.10-bookworm@sha256:1b9955f4f779e11096819e0a2594c9cf568aa2337fea85a45b220bf632376e58 as builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.24.6-bookworm@sha256:b55cd0118651789c1c3623f8d8ba7e9f9e131817ec20af3505ca5410603e47a2 as builder
 
 ARG LDFLAGS
 

examples/msal-go/Dockerfile

@@ -1,4 +1,4 @@
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.10-bookworm@sha256:1b9955f4f779e11096819e0a2594c9cf568aa2337fea85a45b220bf632376e58 as builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.24.6-bookworm@sha256:b55cd0118651789c1c3623f8d8ba7e9f9e131817ec20af3505ca5410603e47a2 as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

examples/msal-go/go.mod

@@ -1,6 +1,6 @@
 module github.com/Azure/azure-workload-identity/example/msal-go
 
-go 1.23.10
+go 1.24.6
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0

examples/msal-go/windows.Dockerfile

@@ -1,7 +1,7 @@
 ARG SERVERCORE_CACHE=gcr.io/k8s-staging-e2e-test-images/windows-servercore-cache:1.0-linux-amd64-${OS_VERSION:-1809}
 ARG BASEIMAGE=mcr.microsoft.com/windows/nanoserver:${OS_VERSION:-1809}
 
-FROM --platform=linux/amd64 mcr.microsoft.com/oss/go/microsoft/golang:1.23.10-bookworm@sha256:1b9955f4f779e11096819e0a2594c9cf568aa2337fea85a45b220bf632376e58 as builder
+FROM --platform=linux/amd64 mcr.microsoft.com/oss/go/microsoft/golang:1.24.6-bookworm@sha256:b55cd0118651789c1c3623f8d8ba7e9f9e131817ec20af3505ca5410603e47a2 as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

go.mod

@@ -1,6 +1,6 @@
 module github.com/Azure/azure-workload-identity
 
-go 1.23.10
+go 1.24.6
 
 require (
 	github.com/Azure/aad-pod-identity v1.8.17

test/e2e/go.mod

@@ -1,6 +1,6 @@
 module github.com/Azure/azure-workload-identity/test/e2e
 
-go 1.23.10
+go 1.24.6
 
 replace (
 	k8s.io/api => k8s.io/api v0.31.1