chore: bump golang to 1.26.5 (#9437)

zhaohuabing · abe-servescale · commit 24bc4760e6de · 2026-07-11T22:04:37.000+02:00
Bumps Go to 1.26.5 (https://go.dev/doc/devel/release#go1.26.5), which includes security fixes to the crypto/tls and os packages. Signed-off-by: Huabing (Robin) Zhao <zhaohuabing@gmail.com> Signed-off-by: Andrea Abellonio <andrea.abellonio@servescale.ai>
diff --git a/examples/backend-utilization/Dockerfile b/examples/backend-utilization/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26.4@sha256:792443b89f65105abba56b9bd5e97f680a80074ac62fc844a584212f8c8102c3 AS builder
+FROM golang:1.26.5@sha256:63f132d58c1f589f0dcda584933a9bb44bfda1150f1506377f5a902f34d86033 AS builder
 
 ARG GO_LDFLAGS=""
 
diff --git a/examples/backend-utilization/go.mod b/examples/backend-utilization/go.mod
@@ -1,3 +1,3 @@
 module github.com/envoyproxy/gateway-backend-utilization
 
-go 1.26.4
+go 1.26.5
diff --git a/examples/dynamic-module-test/Dockerfile b/examples/dynamic-module-test/Dockerfile
@@ -2,7 +2,7 @@
 # Update both together when changing the target Envoy version.
 ARG ENVOY_VERSION=dev
 
-FROM golang:1.26.4@sha256:792443b89f65105abba56b9bd5e97f680a80074ac62fc844a584212f8c8102c3 AS builder
+FROM golang:1.26.5@sha256:63f132d58c1f589f0dcda584933a9bb44bfda1150f1506377f5a902f34d86033 AS builder
 
 WORKDIR /build
 COPY go.mod go.sum ./
diff --git a/examples/dynamic-module-test/go.mod b/examples/dynamic-module-test/go.mod
@@ -1,5 +1,5 @@
 module github.com/envoyproxy/gateway/examples/dynamic-module-test
 
-go 1.26.4
+go 1.26.5
 
 require github.com/envoyproxy/envoy/source/extensions/dynamic_modules v0.0.0-20260305043144-94d5888d4c19
diff --git a/examples/envoy-ext-auth/Dockerfile b/examples/envoy-ext-auth/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26.4@sha256:792443b89f65105abba56b9bd5e97f680a80074ac62fc844a584212f8c8102c3 AS builder
+FROM golang:1.26.5@sha256:63f132d58c1f589f0dcda584933a9bb44bfda1150f1506377f5a902f34d86033 AS builder
 
 ARG GO_LDFLAGS=""
 
diff --git a/examples/envoy-ext-auth/go.mod b/examples/envoy-ext-auth/go.mod
@@ -1,6 +1,6 @@
 module github.com/envoyproxy/gateway-grcp-ext-auth
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/envoyproxy/go-control-plane/envoy v1.37.1-0.20260304210048-a81710db7097
diff --git a/examples/extension-server/go.mod b/examples/extension-server/go.mod
@@ -1,6 +1,6 @@
 module github.com/exampleorg/envoygateway-extension
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/envoyproxy/gateway v1.3.1
diff --git a/examples/grpc-ext-proc/Dockerfile b/examples/grpc-ext-proc/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26.4@sha256:792443b89f65105abba56b9bd5e97f680a80074ac62fc844a584212f8c8102c3 AS builder
+FROM golang:1.26.5@sha256:63f132d58c1f589f0dcda584933a9bb44bfda1150f1506377f5a902f34d86033 AS builder
 
 ARG GO_LDFLAGS=""
 
diff --git a/examples/grpc-ext-proc/go.mod b/examples/grpc-ext-proc/go.mod
@@ -1,6 +1,6 @@
 module github.com/envoyproxy/gateway-grpc-ext-proc
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/envoyproxy/go-control-plane/envoy v1.37.1-0.20260304210048-a81710db7097
diff --git a/examples/preserve-case-backend/Dockerfile b/examples/preserve-case-backend/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26.4@sha256:792443b89f65105abba56b9bd5e97f680a80074ac62fc844a584212f8c8102c3 AS builder
+FROM golang:1.26.5@sha256:63f132d58c1f589f0dcda584933a9bb44bfda1150f1506377f5a902f34d86033 AS builder
 
 ARG GO_LDFLAGS=""
 
diff --git a/examples/preserve-case-backend/go.mod b/examples/preserve-case-backend/go.mod
@@ -1,6 +1,6 @@
 module github.com/envoyproxy/gateway-preserve-case-backend
 
-go 1.26.4
+go 1.26.5
 
 require github.com/valyala/fasthttp v1.72.0
 
diff --git a/examples/simple-extension-server/Dockerfile b/examples/simple-extension-server/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26.4@sha256:792443b89f65105abba56b9bd5e97f680a80074ac62fc844a584212f8c8102c3 AS builder
+FROM golang:1.26.5@sha256:63f132d58c1f589f0dcda584933a9bb44bfda1150f1506377f5a902f34d86033 AS builder
 
 ARG GO_LDFLAGS=""
 
diff --git a/examples/simple-extension-server/go.mod b/examples/simple-extension-server/go.mod
@@ -1,6 +1,6 @@
 module github.com/envoyproxy/gateway-simple-extension-server
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/envoyproxy/gateway v1.8.2
diff --git a/examples/static-file-server/Dockerfile b/examples/static-file-server/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26.4@sha256:792443b89f65105abba56b9bd5e97f680a80074ac62fc844a584212f8c8102c3 AS builder
+FROM golang:1.26.5@sha256:63f132d58c1f589f0dcda584933a9bb44bfda1150f1506377f5a902f34d86033 AS builder
 
 ARG GO_LDFLAGS=""
 
diff --git a/examples/static-file-server/go.mod b/examples/static-file-server/go.mod
@@ -1,3 +1,3 @@
 module github.com/envoyproxy/static-file-server
 
-go 1.26.4
+go 1.26.5
diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/envoyproxy/gateway
 
-go 1.26.4
+go 1.26.5
 
 require (
 	cel.dev/expr v0.25.2
diff --git a/release-notes/current/security_updates/9437-bump-golang-1-26-5.md b/release-notes/current/security_updates/9437-bump-golang-1-26-5.md
@@ -0,0 +1 @@
+Bumped Go to 1.26.5, which includes security fixes to the `crypto/tls` and `os` packages.
diff --git a/site/go.mod b/site/go.mod
@@ -1,6 +1,6 @@
 module github.com/google/docsy-example
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/FortAwesome/Font-Awesome v0.0.0-20241216213156-af620534bfc3 // indirect
diff --git a/test/go.mod b/test/go.mod
@@ -1,6 +1,6 @@
 module github.com/envoyproxy/gateway/test
 
-go 1.26.4
+go 1.26.5
 
 replace github.com/envoyproxy/gateway => ../
 
diff --git a/tools/go.mod b/tools/go.mod
@@ -1,6 +1,6 @@
 module tools
 
-go 1.26.4
+go 1.26.5
 
 tool (
 	github.com/bufbuild/buf/cmd/buf

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM golang:1.26.4@sha256:792443b89f65105abba56b9bd5e97f680a80074ac62fc844a584212f8c8102c3 AS builder`
	`1`	`+FROM golang:1.26.5@sha256:63f132d58c1f589f0dcda584933a9bb44bfda1150f1506377f5a902f34d86033 AS builder`
`2`	`2`
`3`	`3`	`ARG GO_LDFLAGS=""`
`4`	`4`
Original file line number	Diff line number	Diff line change
`@@ -1,3 +1,3 @@`
`1`	`1`	`module github.com/envoyproxy/gateway-backend-utilization`
`2`	`2`
`3`		`-go 1.26.4`
	`3`	`+go 1.26.5`