chore: Backport (03/26/2026) (#1280)

Author: britaniar

.github/ISSUE_TEMPLATE/feature_request.md

@@ -0,0 +1,20 @@
+---
+name: Feature request
+about: Suggest an idea for this project
+title: "[Feature]"
+labels: enhancement
+assignees: ''
+
+---
+
+**Is your feature request related to a problem? Please describe.**
+A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
+
+**Describe the solution you'd like**
+A clear and concise description of what you want to happen.
+
+**Describe alternatives you've considered**
+A clear and concise description of any alternative solutions or features you've considered.
+
+**Additional context**
+Add any other context or screenshots about the feature request here.

.github/workflows/ci.yml

@@ -13,7 +13,7 @@ on:
     paths-ignore: [docs/**, "**.md", "**.mdx", "**.png", "**.jpg"]
 
 env:
-  GO_VERSION: '1.24.13'
+  GO_VERSION: '1.25.8'
   CERT_MANAGER_VERSION: 'v1.16.2'
 
 jobs:

.github/workflows/code-lint.yml

@@ -14,7 +14,7 @@ on:
 
 env:
   # Common versions
-  GO_VERSION: "1.24.13"
+  GO_VERSION: "1.25.8"
 
 jobs:
   detect-noop:
@@ -79,7 +79,7 @@ jobs:
         uses: actions/checkout@v6.0.2
 
       - name: Set up Helm
-        uses: azure/setup-helm@v4
+        uses: azure/setup-helm@v5
         with:
           version: v3.17.0
 

.github/workflows/codespell.yml

@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@58077d3c7e43986b6b15fba718e8ea69e387dfcc # v2.15.1
+        uses: step-security/harden-runner@fa2e9d605c4eeb9fcad4c99c224cee0c6c7f3594 # v2.16.0
         with:
           egress-policy: audit
 

.github/workflows/pr-title-lint.yml

@@ -1,4 +1,9 @@
 name: PR Title Checker
+
+permissions:
+  contents: read
+  pull-requests: write
+
 on:
   pull_request:
     types:

.github/workflows/release.yml

@@ -18,7 +18,7 @@ env:
   MEMBER_AGENT_IMAGE_NAME: member-agent
   REFRESH_TOKEN_IMAGE_NAME: refresh-token
 
-  GO_VERSION: '1.24.13'
+  GO_VERSION: '1.25.8'
 
 jobs:
   export-registry:

.github/workflows/trivy.yml

@@ -17,7 +17,7 @@ on:
     paths-ignore: [docs/**, "**.md", "**.mdx", "**.png", "**.jpg"]
 
 env:
-  GO_VERSION: '1.24.13'
+  GO_VERSION: '1.25.8'
 
 jobs:
   detect-noop:

.github/workflows/upgrade.yml

@@ -1,6 +1,6 @@
 run:
   timeout: 15m
-  go: '1.24.13'
+  go: '1.25.8'
 
 linters-settings:
   stylecheck:

.golangci.yml

@@ -1,7 +1,10 @@
 # The KubeFleet Maintainers
 
-| Maintainer  | Organization | GitHub Username                                       | 
-|-------------|--------------|-------------------------------------------------------|
-| Ryan Zhang  | Microsoft    | [@ryanzhang-oss](https://github.com/ryanzhang-oss)    | 
-| Zhiying Lin | Microsoft    | [@zhiying-lin](https://github.com/zhiying-lin)        | 
-| Chen Yu     | Microsoft    | [@michaelawyu](https://github.com/michaelawyu)        |
+| Maintainer     | Organization | GitHub Username                                    |
+|----------------|--------------|----------------------------------------------------|
+| Ryan Zhang     | Microsoft    | [@ryanzhang-oss](https://github.com/ryanzhang-oss) |
+| Zhiying Lin    | Microsoft    | [@zhiying-lin](https://github.com/zhiying-lin)     |
+| Chen Yu        | Microsoft    | [@michaelawyu](https://github.com/michaelawyu)     |
+| Wei Weng       | Microsoft    | [@weng271190436](https://github.com/weng271190436) |
+| Yetkin Timocin | Microsoft    | [@ytimocin](https://github.com/ytimocin)           |
+| Simon Waight   | Microsoft    | [@sjwaight](https://github.com/sjwaight)           |