Skip to content

sbomtool: bump go to 1.25 and update dependencies#360

Merged
piyush-jena merged 1 commit into
bottlerocket-os:developfrom
jpculp:sbomtool-dep-update
May 22, 2026
Merged

sbomtool: bump go to 1.25 and update dependencies#360
piyush-jena merged 1 commit into
bottlerocket-os:developfrom
jpculp:sbomtool-dep-update

Conversation

@jpculp
Copy link
Copy Markdown
Member

@jpculp jpculp commented May 19, 2026

Description of changes:

  • Update Go version from 1.24.2 to 1.25.8 to better match the sdk-go-1.25 build toolchain
  • Update syft from v1.39.0 to v1.44.0
  • Remove the runtime-spec replace directive (no longer needed with containerd v2)
  • Update indirect dependencies to latest compatible versions
Dependabot PRs subsumed

#335, #338, #342, #343, #347, #348, #349, #350, #351, #355, #356, #358, #361

Testing done:

  • go build ./cmd/sbomtool compiles cleanly
  • go test ./... passes all tests across all packages
  • go mod verify confirms all module checksums are consistent

Terms of contribution:

By submitting this pull request, I agree that this contribution is dual-licensed under the terms of both the Apache License, version 2.0, and the MIT license.

@jpculp jpculp requested review from ginglis13 and piyush-jena May 19, 2026 00:10
@jpculp jpculp marked this pull request as draft May 19, 2026 00:38
Signed-off-by: Patrick J.P. Culp <jpculp@amazon.com>
@jpculp jpculp force-pushed the sbomtool-dep-update branch from 93ef2c1 to ce32b32 Compare May 19, 2026 20:59
@jpculp
Copy link
Copy Markdown
Member Author

jpculp commented May 19, 2026

Updated go.sum and clarify.toml.

@jpculp jpculp marked this pull request as ready for review May 19, 2026 20:59
@jpculp jpculp requested a review from KCSesh May 19, 2026 22:55
Comment thread sbomtool/go.mod
module github.com/bottlerocket-os/bottlerocket-sdk/sbomtool/go

go 1.24.2
go 1.25.8
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should bump to the version that we are shipping

@piyush-jena piyush-jena merged commit 25e776e into bottlerocket-os:develop May 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants