security: bump to go 1.24.2 to resolve CVE-2025-22871

aramase · aramase · commit dd4d6ccef40c · 2025-04-17T15:31:19.000-05:00
Signed-off-by: Anish Ramasekar &lt;anish.ramasekar@gmail.com&gt;
diff --git a/docker/Dockerfile b/docker/Dockerfile
@@ -13,7 +13,7 @@
 # limitations under the License.
 
 # Build the manager binary
-FROM golang:1.24@sha256:3f7444391c51a11a039bf0359ee81cc64e663c17d787ad0e637a4de1a3f62a71 AS builder
+FROM golang:1.24.2@sha256:1ecc479bc712a6bdb56df3e346e33edcc141f469f82840bab9f4bc2bc41bf91d AS builder
 
 ARG TARGETOS
 ARG TARGETARCH
diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module sigs.k8s.io/secrets-store-sync-controller
 
-go 1.24.0
+go 1.24.2
 
 require (
 	github.com/google/go-cmp v0.6.0
diff --git a/hack/tools/go.mod b/hack/tools/go.mod
@@ -1,6 +1,6 @@
 module sigs.k8s.io/secrets-store-sync-controller/hack/tools
 
-go 1.24.0
+go 1.24.2
 
 require github.com/golangci/golangci-lint v1.64.8
 
