Bump Go to 1.26.3

- Go: 1.24.4 -> 1.26.3
- operator-sdk: v1.41.1 -> v1.42.3
- golangci-lint: v2.7.2 -> v2.12.2
- GOTOOLCHAIN_VERSION: go1.24.0 -> go1.26.0
- go-toolset image: 1.24 -> 1.26
- .ci-operator.yaml: ci-build-root-golang-1.24-sdk-1.41.1 -> ci-build-root-golang-1.26-sdk-1.42.3
- Dockerfile.agent: go-toolset:1.24 -> go-toolset:1.26
- ginkgo: v2.28.2 -> v2.32.0
- gomega: v1.42.0 -> v1.42.1
- golang.org/x/crypto: v0.48.0 -> v0.54.0
- golang.org/x/net: v0.49.0 -> v0.56.0
- golang.org/x/sys: v0.41.0 -> v0.47.0
- golang.org/x/text: v0.34.0 -> v0.40.0
- golang.org/x/tools: v0.41.0 -> v0.47.0

Also adds .github/workflows/lints.yaml , like we have in the
other repositories to check for replace lines which should
be removed before merging.

Jira: OSPRH-30997

Depends-On: openstack-k8s-operators/lib-common#715

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Martin Schuppert <mschuppert@redhat.com>

Author: stuggi

.ci-operator.yaml

@@ -1,4 +1,4 @@
 build_root_image:
   name: tools
   namespace: openstack-k8s-operators
-  tag: ci-build-root-golang-1.24-sdk-1.41.1
+  tag: ci-build-root-golang-1.26-sdk-1.42.3

.github/workflows/build-openstack-baremetal-operator.yaml

@@ -27,8 +27,8 @@ jobs:
     needs: [build-openstack-baremetal-operator-agent]
     with:
       operator_name: openstack-baremetal
-      go_version: 1.24.x
-      operator_sdk_version: 1.41.1
+      go_version: 1.26.x
+      operator_sdk_version: 1.42.3
     secrets:
       IMAGENAMESPACE: ${{ secrets.IMAGENAMESPACE }}
       QUAY_USERNAME: ${{ secrets.QUAY_USERNAME }}

.github/workflows/force-bump-pr-manual.yaml

@@ -9,6 +9,6 @@ jobs:
     with:
       operator_name: openstack-baremetal
       branch_name: ${{ github.ref_name }}
-      custom_image: quay.io/openstack-k8s-operators/openstack-k8s-operators-ci-build-tools:golang-1.24-sdk-1.41.1
+      custom_image: quay.io/openstack-k8s-operators/openstack-k8s-operators-ci-build-tools:golang-1.26-sdk-1.42.3
     secrets:
       FORCE_BUMP_PULL_REQUEST_PAT: ${{ secrets.FORCE_BUMP_PULL_REQUEST_PAT }}

.github/workflows/force-bump-pr-scheduled.yaml

@@ -10,6 +10,6 @@ jobs:
     uses: openstack-k8s-operators/openstack-k8s-operators-ci/.github/workflows/force-bump-branches.yaml@main
     with:
       operator_name: openstack-baremetal
-      custom_image: quay.io/openstack-k8s-operators/openstack-k8s-operators-ci-build-tools:golang-1.24-sdk-1.41.1
+      custom_image: quay.io/openstack-k8s-operators/openstack-k8s-operators-ci-build-tools:golang-1.26-sdk-1.42.3
     secrets:
       FORCE_BUMP_PULL_REQUEST_PAT: ${{ secrets.FORCE_BUMP_PULL_REQUEST_PAT }}

.github/workflows/lints.yaml

@@ -0,0 +1,14 @@
+name: Lints
+
+on: [pull_request]
+
+jobs:
+  check-go-mod-replace-lines:
+    name: check for replace lines in go.mod files
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout project code
+        uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7
+      - name: check for replace lines in go.mod files
+        run: |
+          ! egrep --invert-match -e '^replace.*/api => \./api|^replace.*//allow-merging$'  `find . -name 'go.mod'` | egrep -e 'go.mod:replace'

.golangci.yaml

@@ -11,6 +11,11 @@ linters:
     - gosec
     - errname
     - err113
+  settings:
+    govet:
+      disable:
+        # TODO: re-enable once golangci-lint supports Go 1.26 inlining of generics
+        - inline
 
 formatters:
   enable:

.pre-commit-config.yaml

@@ -36,7 +36,7 @@ repos:
     - id: go-mod-tidy
 
 - repo: https://github.com/golangci/golangci-lint
-  rev: v2.7.2
+  rev: v2.12.2
   hooks:
     - id: golangci-lint-full
       args: ["-v"]

Dockerfile

@@ -1,4 +1,4 @@
-ARG GOLANG_BUILDER=registry.access.redhat.com/ubi9/go-toolset:1.24
+ARG GOLANG_BUILDER=registry.access.redhat.com/ubi9/go-toolset:1.26
 ARG OPERATOR_BASE_IMAGE=registry.access.redhat.com/ubi9/ubi-minimal:9.6
 
 # Build the manager binary

Dockerfile.agent

@@ -1,4 +1,4 @@
-ARG GOLANG_BUILDER=registry.access.redhat.com/ubi9/go-toolset:1.24
+ARG GOLANG_BUILDER=registry.access.redhat.com/ubi9/go-toolset:1.26
 ARG OPERATOR_BASE_IMAGE=registry.access.redhat.com/ubi9/ubi-minimal:latest
 
 # Build the manager binary

Makefile

@@ -50,7 +50,7 @@ endif
 
 # Set the Operator SDK version to use. By default, what is installed on the system is used.
 # This is useful for CI or a project to utilize a specific version of the operator-sdk toolkit.
-OPERATOR_SDK_VERSION ?= v1.41.1
+OPERATOR_SDK_VERSION ?= v1.42.3
 
 # Image URL to use all building/pushing image targets
 DEFAULT_IMG ?= quay.io/openstack-k8s-operators/openstack-baremetal-operator:latest
@@ -88,7 +88,7 @@ SHELL = /usr/bin/env bash -o pipefail
 # Extra vars which will be passed to the Docker-build
 DOCKER_BUILD_ARGS ?=
 
-GOTOOLCHAIN_VERSION ?= go1.24.0
+GOTOOLCHAIN_VERSION ?= go1.26.0
 
 .PHONY: all
 all: build
@@ -354,10 +354,10 @@ govet: get-ci-tools
 # Run go test against code
 gotest: test
 
-GOLANGCI_LINT_VERSION ?= v2.7.2
+GOLANGCI_LINT_VERSION ?= v2.12.2
 .PHONY: golangci-lint
 golangci-lint:
-	test -s $(LOCALBIN)/golangci-lint || curl -sSfL https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh | sh -s $(GOLANGCI_LINT_VERSION)
+	test -s $(LOCALBIN)/golangci-lint || curl -sSfL https://golangci-lint.run/install.sh | sh -s $(GOLANGCI_LINT_VERSION)
 	$(LOCALBIN)/golangci-lint run --fix
 
 .PHONY: vulncheck