Skip to content

Fix update-dependent-repositories-gomod toolchain pin - #97

Merged
bszirtes merged 1 commit into
mainfrom
fix/update-dependent-repos-toolchain
Aug 24, 2026
Merged

Fix update-dependent-repositories-gomod toolchain pin#97
bszirtes merged 1 commit into
mainfrom
fix/update-dependent-repos-toolchain

Conversation

@bszirtes

Copy link
Copy Markdown
Contributor

Problem

Once api and sdk land their grpc v1.82.1 uplift (requiring
go >= 1.25.0), this shared workflow's update-dependent-repositories
job will fail across every dependent repo in the matrix (sdk-k8s,
sdk-kernel, cmd-nsmgr, etc.) with:

go: go.mod requires go >= 1.25.0 (running go 1.23.3; GOTOOLCHAIN=local)

when it runs go get -u .../sdk@main + go mod tidy inside each
checkout, since the actions/setup-go step is pinned to 1.23.3 with
no toolchain auto-upgrade.

Fix

  • Bump the setup-go pin to 1.25.0
  • Set GOTOOLCHAIN=auto for the update step, so future go directive
    bumps in any dependent repo don't hard-fail the same way — Go will
    download whatever toolchain the target module actually needs.

This mirrors the identical fix already applied directly in api's own
local copy of this workflow (networkservicemesh/api#203), and resolves
the same class of failure for sdk's copy.

Scope note

This is a shared @main-referenced reusable workflow, consumed by
api, sdk, and (via sdk's own workflow) their 13 dependent repos.
The change takes effect immediately for all consumers once merged.
No config/behavior change for repos that don't cross the go1.25
threshold.

Dependent repos (sdk-k8s, sdk-kernel, cmd-nsmgr, etc.) will require
go >= 1.25.0 once they pull in the current sdk/api uplift (grpc
v1.82.1). The bot's setup-go step was pinned to 1.23.3, which fails
with:

  go: go.mod requires go >= 1.25.0 (running go 1.23.3; GOTOOLCHAIN=local)

when it runs 'go get -u .../sdk@main' + 'go mod tidy' inside each
dependent repo checkout.

Bump the pin to 1.25.0 and set GOTOOLCHAIN=auto for the update step so
future go directive bumps in any dependent repo don't hard-fail the
same way. This mirrors the same fix already applied directly in the
api repo's own copy of this workflow (networkservicemesh/api#203).

This is a shared @main-referenced workflow, so it takes effect
immediately for every consumer (api, sdk, and their dependents) once
merged.

Signed-off-by: Botond Szirtes <botond.szirtes@est.tech>
@bszirtes
bszirtes merged commit f07c7fe into main Aug 24, 2026
2 checks passed
@bszirtes
bszirtes deleted the fix/update-dependent-repos-toolchain branch August 24, 2026 08:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant