fix(ci): use deploy/go.mod for deploy workflow Go version and bump root Go to 1.25.8#1040
Merged
fix(ci): use deploy/go.mod for deploy workflow Go version and bump root Go to 1.25.8#1040
Conversation
…ot Go to 1.25.8 The deploy jobs install Go based on the root go.mod (Go 1.24.13), but then build Pulumi code from deploy/ which requires Go 1.25.6. This causes all staging deploys to fail with: go: go.mod requires go >= 1.25.6 (running go 1.24.13; GOTOOLCHAIN=local) Point the deploy jobs at deploy/go.mod so the correct Go version is installed. Also bump the root go.mod from Go 1.24.13 to 1.25.8 to resolve 5 stdlib vulnerabilities (GO-2026-4599 through GO-2026-4603) that cause govulncheck to fail in CI. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
b3ad5cc to
90850c9
Compare
rdimitrov
approved these changes
Mar 6, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Fixes two CI issues:
1. Deploy workflows broken since PR #1034 (all staging deploys failing)
The deploy-staging and deploy-production workflows install Go using the root
go.mod, but then build Pulumi infrastructure code from thedeploy/directory which has its owngo.mod.This started failing when PR #1034 (
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy) bumpeddeploy/go.modfrom Go 1.24.11 to Go 1.25.6 — a version newer than the root module's Go 1.24.13. Every staging deploy since that merge (Mar 6) has failed with:The last successful deploy was commit cb4807a on Mar 1, before the Go version bump.
Fix: point
go-version-filein both deploy workflows atdeploy/go.modinstead of the rootgo.mod.2.
govulncheckfailing due to Go stdlib vulnerabilitiesFive new Go stdlib vulnerabilities (GO-2026-4599 through GO-2026-4603) were published on Mar 5-6 affecting Go 1.24.13, fixed in Go 1.25.8. These cause
govulncheckin the CI pipeline to fail.Fix: bump root
go.modfrom Go 1.24.13 to Go 1.25.8.Test plan
🤖 Generated with Claude Code