From 2d1241b3e658973b4bdcf62c2c6fab16bdccaad6 Mon Sep 17 00:00:00 2001
From: Zhehao Li <zhehaoli@microsoft.com>
Date: Fri, 21 Aug 2026 14:03:24 -0700
Subject: [PATCH] chore: update go dependency for CVE fixes

---
 .github/workflows/check-files.yml                | 2 +-
 .github/workflows/create-release.yml             | 2 +-
 .github/workflows/e2e-workflow.yml               | 2 +-
 .github/workflows/e2e.yml                        | 2 +-
 .github/workflows/lint-go.yaml                   | 2 +-
 .github/workflows/publish-gh-image-and-chart.yml | 2 +-
 .github/workflows/publish-mcr-image.yaml         | 2 +-
 .github/workflows/tests.yml                      | 2 +-
 .github/workflows/trivy.yaml                     | 2 +-
 Dockerfile                                       | 2 +-
 go.mod                                           | 2 +-
 11 files changed, 11 insertions(+), 11 deletions(-)

diff --git a/.github/workflows/check-files.yml b/.github/workflows/check-files.yml
index d9a0d8a6..3064fca0 100644
--- a/.github/workflows/check-files.yml
+++ b/.github/workflows/check-files.yml
@@ -9,7 +9,7 @@ on:
 
 
 env:
-  GO_VERSION: '1.26.5'
+  GO_VERSION: '1.26.6'
 
 jobs:
   check-files:
diff --git a/.github/workflows/create-release.yml b/.github/workflows/create-release.yml
index 571bec30..f16039ba 100644
--- a/.github/workflows/create-release.yml
+++ b/.github/workflows/create-release.yml
@@ -9,7 +9,7 @@ permissions:
   packages: write
 
 env:
-  GO_VERSION: '1.26.5'
+  GO_VERSION: '1.26.6'
 
 jobs:
   create-release:
diff --git a/.github/workflows/e2e-workflow.yml b/.github/workflows/e2e-workflow.yml
index 94c405bf..a7e27f0d 100644
--- a/.github/workflows/e2e-workflow.yml
+++ b/.github/workflows/e2e-workflow.yml
@@ -39,7 +39,7 @@ jobs:
       id-token: write # This is required for requesting the JWT
     environment: e2e-test
     env:
-      GO_VERSION: "1.26.5"
+      GO_VERSION: "1.26.6"
 
     steps:
       - name: Harden Runner
diff --git a/.github/workflows/e2e.yml b/.github/workflows/e2e.yml
index 362b6a59..b9b65efa 100644
--- a/.github/workflows/e2e.yml
+++ b/.github/workflows/e2e.yml
@@ -9,7 +9,7 @@ on:
     paths-ignore: ["docs/**", "**.md", "**.mdx", "**.png", "**.jpg"]
 
 env:
-  GO_VERSION: "1.26.5"
+  GO_VERSION: "1.26.6"
 
 permissions:
   id-token: write # This is required for requesting the JWT
diff --git a/.github/workflows/lint-go.yaml b/.github/workflows/lint-go.yaml
index 2752f7f1..6e5b9070 100644
--- a/.github/workflows/lint-go.yaml
+++ b/.github/workflows/lint-go.yaml
@@ -13,7 +13,7 @@ on:
       - main
 
 env:
-  GO_VERSION: '1.26.5'
+  GO_VERSION: '1.26.6'
 
 jobs:
   build:
diff --git a/.github/workflows/publish-gh-image-and-chart.yml b/.github/workflows/publish-gh-image-and-chart.yml
index c90fe36d..e50edd5c 100644
--- a/.github/workflows/publish-gh-image-and-chart.yml
+++ b/.github/workflows/publish-gh-image-and-chart.yml
@@ -12,7 +12,7 @@ permissions:
   packages: write
 
 env:
-  GO_VERSION: '1.26.5'
+  GO_VERSION: '1.26.6'
   IMAGE_NAME: 'gpu-provisioner'
   REGISTRY: ghcr.io
 
diff --git a/.github/workflows/publish-mcr-image.yaml b/.github/workflows/publish-mcr-image.yaml
index a2c3c543..165e30a1 100644
--- a/.github/workflows/publish-mcr-image.yaml
+++ b/.github/workflows/publish-mcr-image.yaml
@@ -12,7 +12,7 @@ permissions:
   packages: write
 
 env:
-  GO_VERSION: '1.26.5'
+  GO_VERSION: '1.26.6'
   IMAGE_NAME: 'gpu-provisioner'
 
 jobs:
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 08a9acbf..d26c5f82 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -19,7 +19,7 @@ permissions:
   packages: write
 
 env:
-  GO_VERSION: '1.26.5'
+  GO_VERSION: '1.26.6'
 
 jobs:
   unit-tests:
diff --git a/.github/workflows/trivy.yaml b/.github/workflows/trivy.yaml
index 2575be5a..86feb6a7 100644
--- a/.github/workflows/trivy.yaml
+++ b/.github/workflows/trivy.yaml
@@ -12,7 +12,7 @@ jobs:
       - name: Set up Go 1.x
         uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6
         with:
-          go-version: 1.26.5
+          go-version: 1.26.6
         id: go
 
       - name: Checkout code
diff --git a/Dockerfile b/Dockerfile
index dc8ef466..772f58a0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Build the manager binary
-FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.5 AS builder
+FROM --platform=$BUILDPLATFORM mcr.microsoft.com/oss/go/microsoft/golang:1.26.6 AS builder
 ARG TARGETOS
 ARG TARGETARCH
 ARG KARPENTERVER
diff --git a/go.mod b/go.mod
index 563326d9..f53e2207 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/azure/gpu-provisioner
 
-go 1.26.5
+go 1.26.6
 
 require (
 	github.com/Azure/azure-sdk-for-go v68.0.0+incompatible