Skip to content

Bump to go1.24 and upgrade argocd to 2.14.17#2433

Merged
kurlov merged 16 commits intomainfrom
akurlov/upgrade-to-go1.24
Sep 23, 2025
Merged

Bump to go1.24 and upgrade argocd to 2.14.17#2433
kurlov merged 16 commits intomainfrom
akurlov/upgrade-to-go1.24

Conversation

@kurlov
Copy link
Copy Markdown
Member

@kurlov kurlov commented Sep 10, 2025

Description

  • Bump to go 1.24
  • Bump argo-cd dep to fix critical CVE
  • Migrate golang lint to v2

Checklist (Definition of Done)

  • Unit and integration tests added
  • Added test description under Test manual
  • Documentation added if necessary (i.e. changes to dev setup, test execution, ...)
  • CI and all relevant tests are passing
  • Add the ticket number to the PR title if available, i.e. ROX-12345: ...
  • Discussed security and business related topics privately. Will move any security and business related topics that arise to private communication channel.
  • Add secret to app-interface Vault or Secrets Manager if necessary
  • RDS changes were e2e tested manually
  • Check AWS limits are reasonable for changes provisioning new resources
  • (If applicable) Changes to the dp-terraform Helm values have been reflected in the addon on integration environment

Test manual

N/A

@kurlov kurlov changed the title Bump to go1.24 and upgrade argocd to 1 Bump to go1.24 and upgrade argocd to 2.14.17 Sep 10, 2025
- Add version: 2 specification required for v2
- Remove deprecated run.checks field
- Update staticcheck settings to include both SA and ST rules
- Remove gofmt and goimports (now formatters, not linters)
- Remove gosimple and stylecheck (now part of staticcheck)
- Update pre-commit hook to use golangci-lint v2.4.0

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
@kurlov
Copy link
Copy Markdown
Member Author

kurlov commented Sep 18, 2025

/retest

1 similar comment
@kurlov
Copy link
Copy Markdown
Member Author

kurlov commented Sep 18, 2025

/retest

@kurlov
Copy link
Copy Markdown
Member Author

kurlov commented Sep 18, 2025

/retest

1 similar comment
@kurlov
Copy link
Copy Markdown
Member Author

kurlov commented Sep 19, 2025

/retest

@kurlov
Copy link
Copy Markdown
Member Author

kurlov commented Sep 19, 2025

/retest

module github.com/stackrox/acs-fleet-manager

go 1.23.0
go 1.24.6
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Better to specify the lowest possible Go version, to be able to run on the lower patch versions, unless you rely on a bug fix that is introduced in 1.24.6

Suggested change
go 1.24.6
go 1.24.0

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Unfortunately, 1.24.6 is the lowest possible.The argo-cd dep requires it:

$ go mod tidy
go: github.com/argoproj/argo-cd/v2@v2.14.16 requires go >= 1.24.6; switching to go1.24.7

tools/go.mod Outdated
module github.com/stackrox/acs-fleet-manager/tools

go 1.23.0
go 1.24
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It is preferable to use stricter semantics, introduced in Go 1.21.

Suggested change
go 1.24
go 1.24.0

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I set it to 1.24.6 to be consistent with the root go.mod

RUN dnf update -y --disablerepo=\* --enablerepo=baseos,appstream && dnf -y install procps make which git gettext jq gcc && dnf clean all && rm -rf /var/cache/dnf

COPY --from=registry.ci.openshift.org/openshift/release:golang-1.23 /usr/lib/golang /usr/lib/golang
COPY --from=registry.redhat.io/rhel8/go-toolset@sha256:4842bf7e31849a442f4c6d00f00fe3a6d4793525764e0ddb3ba098c6649a7f67 /usr/lib/golang /usr/lib/golang
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Inconsistent with other Dockerfiles (tags vs sha)

Copy link
Copy Markdown
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Set tag

args: ["--baseline", ".secrets.baseline"]
- repo: https://github.com/golangci/golangci-lint
rev: v1.64.8
rev: v2.4.0
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Nice

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Sep 22, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: kovayur, kurlov

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown
Contributor

openshift-ci bot commented Sep 23, 2025

New changes are detected. LGTM label has been removed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants