WIP: backport Go 1.26 bump by janisz · Pull Request #21417 · stackrox/stackrox · GitHub
Skip to content

WIP: backport Go 1.26 bump#21417

Open
janisz wants to merge 3 commits into
release-4.9from
backport/go-1.26-compat-4.9
Open

WIP: backport Go 1.26 bump#21417
janisz wants to merge 3 commits into
release-4.9from
backport/go-1.26-compat-4.9

Conversation

@janisz

@janisz janisz commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

Description

Backports Go 1.26 compatibility fixes to release-4.9.

#21394 (ROX-35288) bumped the Go compiler and builder images to 1.26.3 on release-4.9, but did not include the code-level fixes required for Go 1.26 compatibility. This PR backports the remaining changes from three master PRs:

Changes

Konflux Go validation pipeline (from #19737):

  • New .konflux/konflux.check-go-builder-version.Dockerfile — validates go.mod compatibility against the builder image
  • New .tekton/checks.yaml — Tekton pipeline wiring
  • Adapted to use rhel_8_golang_1.26 image (release-4.9 uses rhel_8, not rhel_9 like master)

GOTOOLCHAIN removal (from #20291):

  • Removed GOTOOLCHAIN=local enforcement from Makefile and scanner/Makefile
  • Kept git diff check for CI to catch uncommitted go mod tidy results

Go 1.26 compatibility fixes (from #20750):

  • pkg/clientconn/client_test.go — URL parser error changed in Go 1.26 (port validation before URL escape)
  • pkg/tlscheck/tlscheck_test.go — unbracketed IPv6 now rejected per RFC 2732
  • pkg/env/integersetting.go%q%v for []int (stricter govet)
  • central/processindicator/datastore/datastore_impl_test.go — prune timeout increase for Go 1.26 scheduler
  • .golangci.yml — Go version 1.251.26
  • go.modgo 1.25.0go 1.26.3
  • 11 tool go.mod files bumped to `go 1.26.3

janisz and others added 3 commits June 25, 2026 17:26
Backport of #19737. Creates a minimal Konflux pipeline that validates
Go version compatibility by running 'go mod tidy' in the actual builder
image. Adapted image refs to use rhel_8_golang_1.26 matching release-4.9.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Backport of #20291. The Konflux compatibility checks now validate Go
version compatibility in the actual build environment, making the
GOTOOLCHAIN=local simulation unnecessary.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Backport of #20750. Applies Go 1.26 compatibility fixes required after
ROX-35288 bumped the compiler to 1.26.3:

- URL parser: Go 1.26 validates port syntax before URL escapes
- IPv6 validation: url.Parse now requires bracketed IPv6 per RFC 2732
- govet printf: %q → %v for []int (stricter format checking)
- Goroutine scheduling: increased prune timeout for Go 1.26 scheduler
- golangci: updated Go version to 1.26
- All tool go.mod files bumped to go 1.26.3

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@openshift-ci

openshift-ci Bot commented Jun 25, 2026

Copy link
Copy Markdown

@github-actions github-actions Bot added area/central area/operator area/scanner backport PR to backport changes from master to release branch konflux-build Run Konflux in PR. Push commit to trigger it. labels Jun 25, 2026
@janisz janisz marked this pull request as ready for review June 25, 2026 16:06
@janisz janisz requested review from a team and rhacs-bot as code owners June 25, 2026 16:06
@janisz janisz added the auto-retest PRs with this label will be automatically retested if prow checks fails label Jun 25, 2026
@rhacs-bot

Copy link
Copy Markdown
Contributor

Images are ready for the commit at 12f2024.

To use with deploy scripts, first export MAIN_IMAGE_TAG=4.9.8-9-g12f2024100.

@github-actions

Copy link
Copy Markdown
Contributor

/konflux-retest scanner-v4-on-push

@codecov

codecov Bot commented Jun 25, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 47.74%. Comparing base (7c3fa62) to head (12f2024).
⚠️ Report is 1 commits behind head on release-4.9.

Additional details and impacted files
@@               Coverage Diff                @@
##           release-4.9   #21417       +/-   ##
================================================
- Coverage        48.89%   47.74%    -1.16%     
================================================
  Files             2719      779     -1940     
  Lines           202953    79042   -123911     
================================================
- Hits             99244    37735    -61509     
+ Misses           95947    37753    -58194     
+ Partials          7762     3554     -4208     
Flag Coverage Δ
go-unit-tests 47.74% <ø> (-1.16%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@github-actions

Copy link
Copy Markdown
Contributor

/konflux-retest scanner-v4-db-on-push

@rhacs-bot

Copy link
Copy Markdown
Contributor

/retest

@github-actions

Copy link
Copy Markdown
Contributor

/konflux-retest operator-bundle-on-push

2 similar comments
@github-actions

Copy link
Copy Markdown
Contributor

/konflux-retest operator-bundle-on-push

@github-actions

Copy link
Copy Markdown
Contributor

/konflux-retest operator-bundle-on-push

@rhacs-bot

Copy link
Copy Markdown
Contributor

/retest

@github-actions

Copy link
Copy Markdown
Contributor

/konflux-retest scanner-v4-on-push

@github-actions

Copy link
Copy Markdown
Contributor

/konflux-retest main-on-push

1 similar comment
@github-actions

Copy link
Copy Markdown
Contributor

/konflux-retest main-on-push

@openshift-ci

openshift-ci Bot commented Jun 25, 2026

Copy link
Copy Markdown

@janisz: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/gke-scanner-v4-install-tests 12f2024 link false /test gke-scanner-v4-install-tests
ci/prow/gke-operator-e2e-tests 12f2024 link false /test gke-operator-e2e-tests
ci/prow/ocp-4-12-nongroovy-e2e-tests 12f2024 link false /test ocp-4-12-nongroovy-e2e-tests
ci/prow/ocp-next-candidate-scanner-v4-install-tests 12f2024 link false /test ocp-next-candidate-scanner-v4-install-tests
ci/prow/ocp-dev-preview-scanner-v4-install-tests 12f2024 link false /test ocp-dev-preview-scanner-v4-install-tests
ci/prow/ocp-4-12-scanner-v4-install-tests 12f2024 link false /test ocp-4-12-scanner-v4-install-tests
ci/prow/ocp-next-candidate-operator-e2e-tests 12f2024 link false /test ocp-next-candidate-operator-e2e-tests
ci/prow/ocp-4-12-qa-e2e-tests 12f2024 link false /test ocp-4-12-qa-e2e-tests
ci/prow/ocp-dev-preview-operator-e2e-tests 12f2024 link false /test ocp-dev-preview-operator-e2e-tests
ci/prow/ocp-4-21-nongroovy-e2e-tests 12f2024 link false /test ocp-4-21-nongroovy-e2e-tests
ci/prow/ocp-dev-preview-nongroovy-e2e-tests 12f2024 link false /test ocp-dev-preview-nongroovy-e2e-tests
ci/prow/ocp-4-21-operator-e2e-tests 12f2024 link false /test ocp-4-21-operator-e2e-tests
ci/prow/ocp-4-12-operator-e2e-tests 12f2024 link false /test ocp-4-12-operator-e2e-tests
ci/prow/ocp-dev-preview-qa-e2e-tests 12f2024 link false /test ocp-dev-preview-qa-e2e-tests
ci/prow/ocp-next-candidate-qa-e2e-tests 12f2024 link false /test ocp-next-candidate-qa-e2e-tests
ci/prow/ocp-next-candidate-nongroovy-e2e-tests 12f2024 link false /test ocp-next-candidate-nongroovy-e2e-tests
ci/prow/ocp-4-21-scanner-v4-install-tests 12f2024 link false /test ocp-4-21-scanner-v4-install-tests
ci/prow/ocp-4-21-qa-e2e-tests 12f2024 link false /test ocp-4-21-qa-e2e-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/central area/operator area/scanner auto-retest PRs with this label will be automatically retested if prow checks fails backport PR to backport changes from master to release branch do-not-merge/work-in-progress konflux-build Run Konflux in PR. Push commit to trigger it.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants