[9.0](backport #5562) Bump Go version to 1.25.1 (#5583)

* Bump Go version to 1.25.1 (#5562)

* Bump Go version to 1.25.1

* Update CHANGELOG entry

* Bump the version of golangci-lint

* Remove references to the ms_tls13kdf build tag

* Download go module dependencies before GODEBUG=fips140=only is set

* Exclude X25519 curve types when testing in FIPS-140 mode

* Stricter check

* Add missing license header

* Exclude X25519 curve types when testing in FIPS-140-only mode

* Use stricter check

* Update NOTICE files

* Remove IsFIPS140Only helper function

* Set GODEBUG=tlsmlkem=0 for FIPS140-only unit tests

* Remove replace directive from go.mod

* Try not pre-downloading dependencies

(cherry picked from commit 15b8c8a)

* Fixing conflicts

* Bumping timeout

---------

Co-authored-by: Shaunak Kashyap <[email protected]>

Author: mergify[bot]

.go-version

@@ -1 +1 @@
-1.24.7
+1.25.1

.golangci.yml

@@ -4,7 +4,7 @@ run:
   timeout: 1m
   build-tags:
     - integration
-  go: "1.24.7"
+  go: "1.25.1"
 
 issues:
   # Maximum count of issues with the same text.

changelog/fragments/1758819869-bump-golang-1.25.1.yaml

@@ -0,0 +1,32 @@
+# Kind can be one of:
+# - breaking-change: a change to previously-documented behavior
+# - deprecation: functionality that is being removed in a later release
+# - bug-fix: fixes a problem in a previous version
+# - enhancement: extends functionality but does not break or fix existing behavior
+# - feature: new functionality
+# - known-issue: problems that we are aware of in a given version
+# - security: impacts on the security of a product or a user’s deployment.
+# - upgrade: important information for someone upgrading from a prior version
+# - other: does not fit into any of the other categories
+kind: enhancement
+
+# Change summary; a 80ish characters long description of the change.
+summary: Update Go to v1.25.1
+
+# Long description; in case the summary is not enough to describe the change
+# this field accommodate a description without length limits.
+# NOTE: This field will be rendered only for breaking-change and known-issue kinds at the moment.
+#description:
+
+# Affected component; usually one of "elastic-agent", "fleet-server", "filebeat", "metricbeat", "auditbeat", "all", etc.
+component: fleet-server
+
+# PR URL; optional; the PR number that added the changeset.
+# If not present is automatically filled by the tooling finding the PR where this changelog fragment has been added.
+# NOTE: the tooling supports backports, so it's able to fill the original PR number instead of the backport PR number.
+# Please provide it if you are adding a fragment for a different PR.
+pr: https://github.com/elastic/fleet-server/pull/5562
+
+# Issue URL; optional; the GitHub issue related to this changeset (either closes or is part of).
+# If not present is automatically filled by the tooling with the issue linked to the PR number.
+#issue: https://github.com/owner/repo/1234

dev-tools/go.mod

@@ -1,6 +1,6 @@
 module github.com/elastic/fleet-server/dev-tools
 
-go 1.24.7
+go 1.25.1
 
 tool (
 	github.com/elastic/go-json-schema-generate/cmd/schema-generate

go.mod

@@ -1,6 +1,6 @@
 module github.com/elastic/fleet-server/v7
 
-go 1.24.7
+go 1.25.1
 
 require (
 	github.com/Pallinder/go-randomdata v1.2.0

testing/e2e/agent_container_test.go

@@ -89,7 +89,7 @@ func (suite *AgentContainerSuite) TearDownTest() {
 // It checks the status API on the fleet-server's external port and that the agent listed in Kibana states "online"
 // Tests that enroll another agent explicitly need fleet-server to be online
 func (suite *AgentContainerSuite) FleetIsHealthy(bCtx context.Context, endpoint string) {
-	ctx, cancel := context.WithTimeout(bCtx, 4*time.Minute)
+	ctx, cancel := context.WithTimeout(bCtx, 5*time.Minute)
 	defer cancel()
 	suite.FleetServerStatusOK(ctx, endpoint)
 

testing/go.mod

@@ -1,6 +1,6 @@
 module github.com/elastic/fleet-server/testing
 
-go 1.24.7
+go 1.25.1
 
 replace (
 	github.com/elastic/fleet-server/pkg/api => ../pkg/api