fix(cve): Update Go version from 1.24.7 to 1.24.11 to fix CVE (#7057)

* Bump Operator Go version

* Bump Executor Go version

* Bump Go in Core-Builder Dockerfile

* Bump Go Version in CI

Author: vtaskow

.github/workflows/images.yml

@@ -12,7 +12,7 @@ on:
         required: false
 
 env:
-  GOLANG_VERSION: 1.24.7
+  GOLANG_VERSION: 1.24.11
 
 jobs:
   operator:

.github/workflows/python-builder.yml

@@ -8,7 +8,7 @@ on:
         required: true
 
 env:
-  GOLANG_VERSION: 1.24.7
+  GOLANG_VERSION: 1.24.11
 
 jobs:
   build-and-push:

.github/workflows/security_code_tests_v1.yml

@@ -28,7 +28,7 @@ jobs:
       - uses: snyk/actions/setup@master
       - uses: actions/setup-go@v3
         with:
-          go-version: '1.24.7'
+          go-version: '1.24.11'
       - name: security-operator
         run: snyk test --file=operator/go.mod --fail-on=upgradable --severity-threshold=high
         env:
@@ -41,7 +41,7 @@ jobs:
       - uses: snyk/actions/setup@master
       - uses: actions/setup-go@v3
         with:
-          go-version: '1.24.7'
+          go-version: '1.24.11'
       - name: Set up executor's environment
         # NOTE: The executor needs a couple extra steps before we can build it,
         # like copying the operator's package into the executor's folder so that

.github/workflows/test-executor.yml

@@ -8,7 +8,7 @@ on:
   workflow_dispatch:
 
 env:
-  GOLANG_VERSION: 1.24.7
+  GOLANG_VERSION: 1.24.11
 
 jobs:
   executor-lint:

.github/workflows/test-operator.yml

@@ -8,7 +8,7 @@ on:
   workflow_dispatch:
 
 env:
-  GOLANG_VERSION: 1.24.7
+  GOLANG_VERSION: 1.24.11
 
 jobs:
   operator-lint:

core-builder/Dockerfile

@@ -88,8 +88,8 @@ RUN apt-get remove -y --auto-remove \
 
 # INSTALL GO
 ENV PATH=/usr/local/go/bin:$PATH
-RUN wget https://dl.google.com/go/go1.24.7.linux-amd64.tar.gz && \
-    tar -zxvf go1.24.7.linux-amd64.tar.gz && \
+RUN wget https://dl.google.com/go/go1.24.11.linux-amd64.tar.gz && \
+    tar -zxvf go1.24.11.linux-amd64.tar.gz && \
     mv go/ /usr/local/go
 
 # Install kubebuilder (using github link)

executor/Dockerfile.executor

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.24.7 as builder
+FROM golang:1.24.11 as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

executor/go.mod

@@ -1,6 +1,6 @@
 module github.com/seldonio/seldon-core/executor
 
-go 1.24.7
+go 1.24.11
 
 require (
 	github.com/cloudevents/sdk-go v1.2.0

operator/Dockerfile

@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM golang:1.24.7 as builder
+FROM golang:1.24.11 as builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

operator/go.mod

@@ -1,6 +1,6 @@
 module github.com/seldonio/seldon-core/operator
 
-go 1.24.7
+go 1.24.11
 
 require (
 	emperror.dev/errors v0.8.0