fix: CVE-2025-61726 - upgrade go version to >1.25.5

[infernus01]

Changes

Scope of this fix is to address CVE-2025-61726 by upgrading go version above 1.25.5

/kind bug

Submitter Checklist

These are the criteria that every PR should meet, please check them off as you
review them:

• Includes tests (if functionality changed/added)
• Run the code checkers with make check
• Regenerate the manpages, docs and go formatting with make generated
• Commit messages follow commit message best practices

See the contribution guide
for more details.

Release Notes

[chmouel]

there is no make vendor or something to be done here as well?

[infernus01]

I did that - go mod tidy , then go mod vendor, but got nothing from them.

[chmouel]

/lgtm

[chmouel]

/ok-to-test

[pratap0007]

/lgtm
/approve

[tekton-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: pratap0007
To complete the pull request process, please ask for approval from chmouel after the PR has been reviewed.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[aThorp96]

Instead of removing the ci.yaml file entirely, can we remove or fix it in a separate PR?

The lint job failed because the new go version is incompatible with the golangci-lint version we use. I believe we should be able to fix this by setting the golangci-version to v2.9.0

The test job failed because the Make target doesn't exist. It looks like if we just add this change to the makefile it may work as intended: e1f53b9#diff-76ed074a9305c04054cdebb9e9aad2d818052b07091de1f20cad0bbac34ffb52

[tekton-robot]

New changes are detected. LGTM label has been removed.

[infernus01]

Also, the ci.yaml on the branch release-v0.37.3 references ./.github/workflows/e2e-matrix.yml as a reusable workflow, but that file was never backported from main to this release branch. And when GitHub Actions can't resolve a reusable workflow reference, it fails the entire workflow at the setup phase, so none of the jobs (build, lint, test) even start.