From 4e43d73b02555f43028a5cb9f72edda87682a2d9 Mon Sep 17 00:00:00 2001
From: Keerthan Reddy Mala <kremala@amazon.com>
Date: Fri, 21 Jun 2024 14:46:15 -0700
Subject: [PATCH] update the go version to fix the vulnerabilities

---
 .github/workflows/deps.yml | 4 ++--
 .ko.yaml                   | 2 +-
 Dockerfile                 | 4 ++--
 cloudbuild.yaml            | 2 +-
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/deps.yml b/.github/workflows/deps.yml
index cd3cf361d5..360b69096b 100644
--- a/.github/workflows/deps.yml
+++ b/.github/workflows/deps.yml
@@ -22,10 +22,10 @@ jobs:
       - id: govulncheck
         uses: golang/govulncheck-action@v1
         with:
-          go-version-input: 1.21.5
+          go-version-input: 1.21.11
           go-version-file: go.mod
       - id: govulncheck-tests-e2e
         uses: golang/govulncheck-action@v1
         with:
-          go-version-input: 1.21.5
+          go-version-input: 1.21.11
           go-version-file: tests/e2e/go.mod
\ No newline at end of file
diff --git a/.ko.yaml b/.ko.yaml
index 814102ff00..f499bc2bd1 100644
--- a/.ko.yaml
+++ b/.ko.yaml
@@ -1 +1 @@
-defaultBaseImage: registry.k8s.io/build-image/go-runner:v2.3.1-go1.21.5-bookworm.0
+defaultBaseImage: registry.k8s.io/build-image/go-runner:v2.3.1-go1.21.11-bookworm.0
diff --git a/Dockerfile b/Dockerfile
index 71b696677d..3d5951f134 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,7 +14,7 @@
 ##                               BUILD ARGS                                   ##
 ################################################################################
 # This build arg allows the specification of a custom Golang image.
-ARG GOLANG_IMAGE=golang:1.21.5
+ARG GOLANG_IMAGE=golang:1.21.11
 
 # The distroless image on which the CPI manager image is built.
 #
@@ -22,7 +22,7 @@ ARG GOLANG_IMAGE=golang:1.21.5
 # deterministic builds. Follow what kubernetes uses to build
 # kube-controller-manager, for example for 1.23.x:
 # https://github.com/kubernetes/kubernetes/blob/release-1.24/build/common.sh#L94
-ARG DISTROLESS_IMAGE=registry.k8s.io/build-image/go-runner:v2.3.1-go1.21.5-bookworm.0
+ARG DISTROLESS_IMAGE=registry.k8s.io/build-image/go-runner:v2.3.1-go1.21.11-bookworm.0
 
 ################################################################################
 ##                              BUILD STAGE                                   ##
diff --git a/cloudbuild.yaml b/cloudbuild.yaml
index 978bd16b89..285c04148c 100644
--- a/cloudbuild.yaml
+++ b/cloudbuild.yaml
@@ -17,7 +17,7 @@ steps:
       - --platform=linux/amd64,linux/arm64
       - .
   # Build cloudbuild artifacts (for attestation)
-  - name: 'docker.io/library/golang:1.21.5-bookworm'
+  - name: 'docker.io/library/golang:1.21.11-bookworm'
     id: cloudbuild-artifacts
     entrypoint: make
     env: