From 7562c56aab4ceb936c1d36ebc80773c598110f2c Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 18 Aug 2026 22:50:10 +0000
Subject: [PATCH 1/2] Initial plan


From 7356ae4e4e2f8f185911f962a1a16bdae9fe53e2 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Tue, 18 Aug 2026 22:53:33 +0000
Subject: [PATCH 2/2] fix: bump Go toolchain to 1.25.13 to address trivy CVEs

Co-authored-by: britaniar <145056127+britaniar@users.noreply.github.com>
---
 .github/workflows/build-publish-mcr.yml         | 2 +-
 .github/workflows/e2e-tests.yml                 | 2 +-
 .github/workflows/go.yml                        | 2 +-
 .github/workflows/publish-image.yml             | 2 +-
 .github/workflows/trivy.yml                     | 2 +-
 .github/workflows/unit-integration-tests.yml    | 2 +-
 docker/hub-net-controller-manager.Dockerfile    | 2 +-
 docker/mcs-controller-manager.Dockerfile        | 2 +-
 docker/member-net-controller-manager.Dockerfile | 2 +-
 docker/net-crd-installer.Dockerfile             | 2 +-
 go.mod                                          | 2 +-
 11 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/build-publish-mcr.yml b/.github/workflows/build-publish-mcr.yml
index 55463714..87a1817d 100644
--- a/.github/workflows/build-publish-mcr.yml
+++ b/.github/workflows/build-publish-mcr.yml
@@ -17,7 +17,7 @@ env:
   # `public` indicates images to MCR wil be publicly available, and will be removed in the final MCR images
   REGISTRY_REPO: public/aks/fleet
 
-  GO_VERSION: '1.25.12'
+  GO_VERSION: '1.25.13'
 
 jobs:
   prepare-variables:
diff --git a/.github/workflows/e2e-tests.yml b/.github/workflows/e2e-tests.yml
index 7e260811..08d5eff5 100644
--- a/.github/workflows/e2e-tests.yml
+++ b/.github/workflows/e2e-tests.yml
@@ -13,7 +13,7 @@ permissions:
   contents: read
 
 env:
-  GO_VERSION: '1.25.12'
+  GO_VERSION: '1.25.13'
 
 jobs:
   detect-noop:
diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
index 550a4465..1fdf629c 100644
--- a/.github/workflows/go.yml
+++ b/.github/workflows/go.yml
@@ -14,7 +14,7 @@ on:
 
 env:
   # Common versions
-  GO_VERSION: '1.25.12'
+  GO_VERSION: '1.25.13'
 
 jobs:
 
diff --git a/.github/workflows/publish-image.yml b/.github/workflows/publish-image.yml
index 1743903c..bebfa517 100644
--- a/.github/workflows/publish-image.yml
+++ b/.github/workflows/publish-image.yml
@@ -19,7 +19,7 @@ env:
   REGISTRY: ghcr.io
   IMAGE_VERSION: latest
 
-  GO_VERSION: '1.25.12'
+  GO_VERSION: '1.25.13'
 
 jobs:
   export-registry:
diff --git a/.github/workflows/trivy.yml b/.github/workflows/trivy.yml
index 807e5517..dfbd922a 100644
--- a/.github/workflows/trivy.yml
+++ b/.github/workflows/trivy.yml
@@ -21,7 +21,7 @@ env:
   MEMBER_NET_CONTROLLER_MANAGER_IMAGE_NAME: member-net-controller-manager
   MCS_CONTROLLER_MANAGER_IMAGE_NAME: mcs-controller-manager
 
-  GO_VERSION: '1.25.12'
+  GO_VERSION: '1.25.13'
 
 jobs:
   export-registry:
diff --git a/.github/workflows/unit-integration-tests.yml b/.github/workflows/unit-integration-tests.yml
index a9aea9d3..d40574ed 100644
--- a/.github/workflows/unit-integration-tests.yml
+++ b/.github/workflows/unit-integration-tests.yml
@@ -16,7 +16,7 @@ permissions:
   contents: read
 
 env:
-  GO_VERSION: '1.25.12'
+  GO_VERSION: '1.25.13'
 
 jobs:
   detect-noop:
diff --git a/docker/hub-net-controller-manager.Dockerfile b/docker/hub-net-controller-manager.Dockerfile
index c79a7922..3486788e 100644
--- a/docker/hub-net-controller-manager.Dockerfile
+++ b/docker/hub-net-controller-manager.Dockerfile
@@ -1,5 +1,5 @@
 # Build the hub-net-controller-manager binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.12 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.13 AS builder
 
 ARG GOOS=linux
 ARG GOARCH=amd64
diff --git a/docker/mcs-controller-manager.Dockerfile b/docker/mcs-controller-manager.Dockerfile
index 26515368..5f7daf9e 100644
--- a/docker/mcs-controller-manager.Dockerfile
+++ b/docker/mcs-controller-manager.Dockerfile
@@ -1,5 +1,5 @@
 # Build the mcs-controller-manager binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.12 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.13 AS builder
 
 ARG GOOS=linux
 ARG GOARCH=amd64
diff --git a/docker/member-net-controller-manager.Dockerfile b/docker/member-net-controller-manager.Dockerfile
index 9af8cd9f..488ecca5 100644
--- a/docker/member-net-controller-manager.Dockerfile
+++ b/docker/member-net-controller-manager.Dockerfile
@@ -1,5 +1,5 @@
 # Build the member-net-controller-manager binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.12 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.13 AS builder
 
 ARG GOOS=linux
 ARG GOARCH=amd64
diff --git a/docker/net-crd-installer.Dockerfile b/docker/net-crd-installer.Dockerfile
index e2f9d954..a2384176 100644
--- a/docker/net-crd-installer.Dockerfile
+++ b/docker/net-crd-installer.Dockerfile
@@ -1,5 +1,5 @@
 # Build the net-crd-installer binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.12 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.25.13 AS builder
 
 ARG GOOS=linux
 ARG GOARCH=amd64
diff --git a/go.mod b/go.mod
index c698ae16..3c2e7dbc 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module go.goms.io/fleet-networking
 
-go 1.25.12
+go 1.25.13
 
 require go.goms.io/fleet v0.14.0