Update to go 1.25.4

.github/workflows/controller-build.yaml

@@ -29,7 +29,7 @@ jobs:
     - name: Setup Golang
       uses: actions/setup-go@v3
       with:
-        go-version: '1.23.12'
+        go-version: '1.25.4'
 
     - name: Build
       uses: ./.github/actions/build

.github/workflows/pull-request.yaml

@@ -21,7 +21,7 @@ jobs:
     - name: Setup Golang
       uses: actions/setup-go@v3
       with:
-        go-version: '1.23.12'
+        go-version: '1.25.4'
 
     - name: Test
       run: make test

.github/workflows/vaultenv-build.yaml

@@ -29,7 +29,7 @@ jobs:
       - name: Setup Golang
         uses: actions/setup-go@v3
         with:
-          go-version: '1.23.12'
+          go-version: '1.25.4'
 
       - name: Build
         uses: ./.github/actions/build

Dockerfile

@@ -1,6 +1,6 @@
 ARG BASEIMAGE=gcr.io/distroless/static:nonroot
 ARG BASE_ALPINE=alpine:3.22.1
-ARG GO_VERSION=1.23.12
+ARG GO_VERSION=1.25.4
 
 # -------
 # Builder

cmd/azure-keyvault-controller/controller/azureKeyVaultSecret.go

@@ -151,7 +151,7 @@ func (c *Controller) syncDeletedAzureKeyVaultSecret(key string) error {
 	if !isOwnedBy(outputObject, akvs) { // checks if the object has a controllerRef set to the given owner
 		msg := fmt.Sprintf(MessageResourceExists, outputObject.GetName())
 		c.recorder.Event(akvs, corev1.EventTypeWarning, ErrResourceExists, msg)
-		return fmt.Errorf(msg)
+		return fmt.Errorf("%s", msg)
 	}
 
 	return nil
@@ -193,7 +193,7 @@ func (c *Controller) syncAzureKeyVaultSecret(key string) error {
 	if !isOwnedBy(outputObject, akvs) { // checks if the object has a controllerRef set to the given owner
 		msg := fmt.Sprintf(MessageResourceExists, outputObject.GetName())
 		c.recorder.Event(akvs, corev1.EventTypeWarning, ErrResourceExists, msg)
-		return fmt.Errorf(msg)
+		return fmt.Errorf("%s", msg)
 	}
 
 	return nil
@@ -222,7 +222,7 @@ func (c *Controller) syncAzureKeyVault(key string) error {
 			msg := fmt.Sprintf(FailedAzureKeyVault, akvs.Name, akvs.Spec.Vault.Name, err.Error())
 			c.recorder.Event(akvs, corev1.EventTypeWarning, ErrAzureVault, msg)
 			syncFailures.WithLabelValues("sync", "AzureKeyVault").Inc()
-			return fmt.Errorf(msg)
+			return fmt.Errorf("%s", msg)
 		}
 
 		secretHash = getMD5HashOfByteValues(secretValue)
@@ -266,7 +266,7 @@ func (c *Controller) syncAzureKeyVault(key string) error {
 		if err != nil {
 			msg := fmt.Sprintf(FailedAzureKeyVault, akvs.Name, akvs.Spec.Vault.Name, err.Error())
 			c.recorder.Event(akvs, corev1.EventTypeWarning, ErrAzureVault, msg)
-			return fmt.Errorf(msg)
+			return fmt.Errorf("%s", msg)
 		}
 
 		cmHash = getMD5HashOfStringValues(cmValue)

cmd/azure-keyvault-controller/main.go

@@ -191,7 +191,7 @@ func main() {
 		logLevel, _ := strconv.Atoi(flag.Lookup("v").Value.String())
 		if logLevel >= 4 {
 			azlog.SetListener(func(cls azlog.Event, msg string) {
-				klog.Infof(msg)
+				klog.Infof("%s", msg)
 			})
 		}
 		token, keyVaultDNSSuffix, err = getCredentialsFromAzidentity()

go.mod

@@ -1,6 +1,6 @@
 module github.com/SparebankenVest/azure-key-vault-to-kubernetes
 
-go 1.23.12
+go 1.25.4
 
 require (
 	github.com/Azure/aad-pod-identity v1.8.17

images/Dockerfile.build

@@ -1,6 +1,6 @@
 # Accept the Go version for the image to be set as a build argument.
-# Default to Go 1.23.12
-ARG GO_VERSION=1.23.12
+# Default to Go 1.25.4
+ARG GO_VERSION=1.25.4
 ARG VCS_REF
 ARG BUILD_DATE
 ARG VCS_URL

tools/go.mod

@@ -1,6 +1,6 @@
 module github.com/SparebankenVest/azure-key-vault-to-kubernetesl/tools
 
-go 1.23.12
+go 1.25.4
 
 require (
 	github.com/client9/misspell v0.3.4