bump build_root to go1.26-linux for ALC/CLC repos#82325
Merged
openshift-merge-bot[bot] merged 2 commits intoJul 23, 2026
Conversation
ci-operator can auto-detect base_images and inputs from Dockerfile FROM lines (see https://docs.ci.openshift.org/architecture/ci-operator/#automatic-detection-from-dockerfiles). These were mass-cleaned in PR openshift#74942 but the 2.17 and 5.0 branch configs were created after that cleanup (PRs openshift#74846, openshift#78222) and still had the redundant entries. Also removes dead go1.24 base_images entries from provider-credential-controller and multicloud-integrations. Repos: cluster-curator-controller, cluster-image-set-controller, provider-credential-controller, multicloud-operators-application, multicloud-operators-channel, multicloud-integrations, multicloud-operators-subscription Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Contributor
|
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Repository YAML (base), Central YAML (inherited) Review profile: CHILL Plan: Enterprise Run ID: 📒 Files selected for processing (64)
WalkthroughThe CI operator configurations update Stolostron build roots from Go 1.25-era builder images to ChangesGo builder image migration
Estimated code review effort: 2 (Simple) | ~10 minutes Possibly related PRs
Suggested reviewers: 🚥 Pre-merge checks | ✅ 15✅ Passed checks (15 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Warning There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure. 🔧 Checkov (3.3.8)ci-operator/config/stolostron/clusterclaims-controller/stolostron-clusterclaims-controller-backplane-2.8.yamlTraceback (most recent call last): ci-operator/config/stolostron/clusterclaims-controller/stolostron-clusterclaims-controller-backplane-2.9.yamlTraceback (most recent call last): ci-operator/config/stolostron/clusterclaims-controller/stolostron-clusterclaims-controller-backplane-5.0.yamlTraceback (most recent call last):
Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out. Comment |
openshift-ci
Bot
added
the
needs-ok-to-test
Contributor
|
Hi @falconizmi. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
Update CI builder image to Go 1.26 across all supported branches to address CVE-2026-27145 (crypto/x509 DoS). Repos: cluster-curator-controller, clusterclaims-controller, cluster-image-set-controller, provider-credential-controller, multicloud-operators-application, multicloud-operators-channel, multicloud-integrations, multicloud-operators-subscription CLC branches: main, backplane-2.6, 2.8, 2.9, 2.10, 2.11, 2.17, 5.0 ALC branches: main, release-2.11, 2.13, 2.14, 2.15, 2.16, 2.17, 5.0 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
falconizmi
force-pushed
the
bump-go1.26-alc-clc
branch
from
July 22, 2026 20:59
857175c to
63fe1a4
Compare
Contributor
|
[REHEARSALNOTIFIER]
A total of 239 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs. A full list of affected jobs can be found here Interacting with pj-rehearseComment: Once you are satisfied with the results of the rehearsals, comment: |
Contributor
|
[REHEARSALNOTIFIER]
A total of 239 jobs have been affected by this change. The above listing is non-exhaustive and limited to 25 jobs. A full list of affected jobs can be found here Interacting with pj-rehearseComment: Once you are satisfied with the results of the rehearsals, comment: |
Contributor
|
/pj-rehearse skip |
Contributor
|
@xiangjingli: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
Contributor
|
@xiangjingli: needs-ok-to-test label found, no rehearsals will be run |
Contributor
|
/ok-to-test |
openshift-ci
Bot
added
ok-to-test
Contributor
|
/pj-rehearse skip |
Contributor
|
@xiangjingli: now processing your pj-rehearse request. Please allow up to 10 minutes for jobs to trigger or cancel. |
openshift-merge-bot
Bot
added
the
rehearsals-ack
Contributor
|
/lgtm |
Contributor
openshift-ci
Bot
added
the
approved
Contributor
|
@falconizmi: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
This was referenced Jul 23, 2026
apahim
pushed a commit
to apahim/release
that referenced
this pull request
Jul 24, 2026
* remove auto-detectable base_images and inputs for ALC/CLC repos ci-operator can auto-detect base_images and inputs from Dockerfile FROM lines (see https://docs.ci.openshift.org/architecture/ci-operator/#automatic-detection-from-dockerfiles). These were mass-cleaned in PR openshift#74942 but the 2.17 and 5.0 branch configs were created after that cleanup (PRs openshift#74846, openshift#78222) and still had the redundant entries. Also removes dead go1.24 base_images entries from provider-credential-controller and multicloud-integrations. Repos: cluster-curator-controller, cluster-image-set-controller, provider-credential-controller, multicloud-operators-application, multicloud-operators-channel, multicloud-integrations, multicloud-operators-subscription Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> * bump build_root to go1.26-linux for ALC/CLC repos Update CI builder image to Go 1.26 across all supported branches to address CVE-2026-27145 (crypto/x509 DoS). Repos: cluster-curator-controller, clusterclaims-controller, cluster-image-set-controller, provider-credential-controller, multicloud-operators-application, multicloud-operators-channel, multicloud-integrations, multicloud-operators-subscription CLC branches: main, backplane-2.6, 2.8, 2.9, 2.10, 2.11, 2.17, 5.0 ALC branches: main, release-2.11, 2.13, 2.14, 2.15, 2.16, 2.17, 5.0 Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
base_imagesandinputsblocks from 2.17/5.0 branch configs (follow-up to *: remove auto-detectable base_images & inputs #74942, docs)go1.24base_imagesentries from provider-credential-controller and multicloud-integrationsbuild_rootfromgo1.25-linux(andgo1.23/go1.24outliers) togo1.26-linuxacross all supported branchesNeeded to address CVE-2026-27145 (Go
crypto/x509DoS). The Go 1.26 bump PRs on the repos themselves are blocked until this merges —go.modsaysgo 1.26but prow uses thego1.25-linuxbuilder, causingcompile: version "go1.26.0" does not match go tool version "go1.25.12".Repos
Branches updated
Summary by CodeRabbit
go1.26-linuxbuilder image.base_imagesandinputsconfiguration from applicable 2.17 and 5.0 branches.