fix(deps): Bump Go versions to address CVE CVE-2025-47907 (#12267)

mprahl · web-flow · commit cd037e2c5293 · 2025-09-22T15:34:01.000Z
Signed-off-by: mprahl &lt;mprahl@users.noreply.github.com&gt;
diff --git a/api/go.mod b/api/go.mod
@@ -1,8 +1,8 @@
 module github.com/kubeflow/pipelines/api
 
-go 1.24.2
+go 1.24.7
 
-toolchain go1.24.4
+toolchain go1.24.7
 
 require (
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20250715232539-7130f93afb79
diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/kubeflow/pipelines
 
-go 1.24.2
+go 1.24.7
 
 require (
 	github.com/Masterminds/squirrel v0.0.0-20190107164353-fa735ea14f09
diff --git a/kubernetes_platform/go.mod b/kubernetes_platform/go.mod
@@ -1,8 +1,8 @@
 module github.com/kubeflow/pipelines/kubernetes_platform
 
-go 1.24.2
+go 1.24.7
 
-toolchain go1.24.4
+toolchain go1.24.7
 
 require (
 	github.com/kubeflow/pipelines/api v0.0.0-00010101000000-000000000000
diff --git a/test/tools/project-cleaner/go.mod b/test/tools/project-cleaner/go.mod
@@ -1,8 +1,8 @@
 module github.com/kubeflow/pipelines/test/tools/project-cleaner
 
-go 1.23.0
+go 1.23.12
 
-toolchain go1.23.7
+toolchain go1.23.12
 
 require (
 	cloud.google.com/go/compute v1.21.0
diff --git a/third_party/ml-metadata/go.mod b/third_party/ml-metadata/go.mod
@@ -1,6 +1,6 @@
 module github.com/kubeflow/pipelines/third_party/ml-metadata
 
-go 1.23.0
+go 1.23.12
 
 require (
 	google.golang.org/grpc v1.58.3
