From b15a136461158c653997e29d5f57da5253435cab Mon Sep 17 00:00:00 2001
From: Carlos Panato <ctadeu@gmail.com>
Date: Wed, 9 Jul 2025 15:49:29 +0200
Subject: [PATCH] update images to use go1.24.5

Signed-off-by: Carlos Panato <ctadeu@gmail.com>
---
 .github/workflows/builder.yml |  4 ++--
 Dockerfile                    | 14 +++++++-------
 Dockerfile.builder            |  4 ++--
 3 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/builder.yml b/.github/workflows/builder.yml
index f5d42a7..f85cbb7 100644
--- a/.github/workflows/builder.yml
+++ b/.github/workflows/builder.yml
@@ -5,10 +5,10 @@ on:
     inputs:
       builder-tag:
         description: golang cross builder tag name
-        default: v1.24.4-0
+        default: v1.24.5-0
       golang-version:
         description: golang version
-        default: "1.24.4"
+        default: "1.24.5"
       osxcross-git-hash:
         description: git commit hash of osx-cross project
         default: "ff8d100f3f026b4ffbe4ce96d8aac4ce06f1278b"
diff --git a/Dockerfile b/Dockerfile
index a9d989e..99684bc 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 ARG OS_CODENAME=bookworm
 
-FROM ghcr.io/gythialy/golang-cross-builder:v1.24.4-0-${OS_CODENAME:-bookworm}
+FROM ghcr.io/gythialy/golang-cross-builder:v1.24.5-0-${OS_CODENAME:-bookworm}
 
 LABEL maintainer="Goren G<gythialy.koo+github@gmail.com>"
 LABEL org.opencontainers.image.source https://github.com/gythialy/golang-cross
@@ -8,8 +8,8 @@ LABEL org.opencontainers.image.source https://github.com/gythialy/golang-cross
 COPY entrypoint.sh /
 
 # install cosign
-ARG COSIGN_VERSION=v2.5.0
-ARG COSIGN_SHA=1f6c194dd0891eb345b436bb71ff9f996768355f5e0ce02dde88567029ac2188
+ARG COSIGN_VERSION=v2.5.2
+ARG COSIGN_SHA=bcfeae05557a9f313ee4392d2f335d0ff69ebbfd232019e3736fb04999fe1734
 RUN \
 	COSIGN_DOWNLOAD_FILE=cosign-linux-amd64 && \
 	wget -O $COSIGN_DOWNLOAD_FILE https://github.com/sigstore/cosign/releases/download/${COSIGN_VERSION}/${COSIGN_DOWNLOAD_FILE} && \
@@ -19,8 +19,8 @@ RUN \
 	cosign version
 
 # install syft
-ARG SYFT_VERSION=v1.23.1
-ARG SYFT_SHA=42f3e01b64f054d0caee42073cb94e3ac3e61be6f0100e7ecda96e6a2abf7e22
+ARG SYFT_VERSION=v1.28.0
+ARG SYFT_SHA=3edee7fe1ceb1f78360e547f57048930d57f00c7ec3d0b8bdfb902805f048468
 RUN  \
 	SYFT_DOWNLOAD_FILE=syft_${SYFT_VERSION#v}_linux_amd64.tar.gz && \
 	SYFT_DOWNLOAD_URL=https://github.com/anchore/syft/releases/download/${SYFT_VERSION}/${SYFT_DOWNLOAD_FILE} && \
@@ -42,8 +42,8 @@ RUN \
 	go version
 
 # install goreleaser
-ARG GORELEASER_VERSION=v2.9.0
-ARG GORELEASER_SHA=a066fcd713684abed0d750d7559f1a5d794fa2faa8e8f1ad2eecec8c373668a7
+ARG GORELEASER_VERSION=v2.11.0
+ARG GORELEASER_SHA=da8383cb2e1e848372a337922333ec883b8607c2ba70a2a68a0f33022fb7ebfd
 # RUN \
 # 		wget https://github.com/goreleaser/goreleaser/releases/download/$GORELEASER_VERSION/checksums.txt.pem && \
 # 		cosign verify-blob --certificate checksums.txt.pem --signature https://github.com/goreleaser/goreleaser/releases/download/$GORELEASER_VERSION/checksums.txt.sig https://github.com/goreleaser/goreleaser/releases/download/$GORELEASER_VERSION/checksums.txt && \
diff --git a/Dockerfile.builder b/Dockerfile.builder
index 932d515..800e0c3 100644
--- a/Dockerfile.builder
+++ b/Dockerfile.builder
@@ -1,11 +1,11 @@
 # golang parameters
-ARG GO_VERSION=1.24.4
+ARG GO_VERSION=1.24.5
 ARG OS_CODENAME=bookworm
 ARG OSK_SDK=macos-13
 
 FROM ghcr.io/gythialy/osx-sdk:${OSK_SDK:-macos-13} AS osx-sdk
 
-FROM golang:${GO_VERSION:-1.24.4}-${OS_CODENAME:-bookworm} AS base
+FROM golang:${GO_VERSION:-1.24.5}-${OS_CODENAME:-bookworm} AS base
 
 # osxcross parameters
 ARG OSX_VERSION_MIN=10.13