chore: fix CVE-2025-22871 (#40)

fix CVE-2025-22871

Signed-off-by: Ryan Zhang <zhangryan@microsoft.com>
Co-authored-by: Ryan Zhang <zhangryan@microsoft.com>

Author: ryanzhang-oss

.github/workflows/ci.yml

@@ -13,7 +13,7 @@ on:
     paths-ignore: [docs/**, "**.md", "**.mdx", "**.png", "**.jpg"]
 
 env:
-  GO_VERSION: '1.23.6'
+  GO_VERSION: '1.23.8'
 
 jobs:
   detect-noop:

.github/workflows/code-lint.yml

@@ -14,7 +14,7 @@ on:
 
 env:
   # Common versions
-  GO_VERSION: '1.23.6'
+  GO_VERSION: '1.23.8'
 
 jobs:
 

.github/workflows/trivy.yml

@@ -18,7 +18,7 @@ env:
   MEMBER_AGENT_IMAGE_NAME: member-agent
   REFRESH_TOKEN_IMAGE_NAME: refresh-token
 
-  GO_VERSION: '1.23.6'
+  GO_VERSION: '1.23.8'
 
 jobs:
   export-registry:

.github/workflows/upgrade.yml

@@ -20,7 +20,7 @@ on:
     paths-ignore: [docs/**, "**.md", "**.mdx", "**.png", "**.jpg"]
 
 env:
-  GO_VERSION: '1.23.6'
+  GO_VERSION: '1.23.8'
 
 jobs:
   detect-noop:

.golangci.yml

@@ -1,6 +1,6 @@
 run:
   timeout: 15m
-  go: '1.23.6'
+  go: '1.23.8'
 
 linters-settings:
   stylecheck:

docker/hub-agent.Dockerfile

@@ -1,5 +1,5 @@
 # Build the hubagent binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.6 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.8 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

docker/member-agent.Dockerfile

@@ -1,5 +1,5 @@
 # Build the memberagent binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.6 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.8 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

docker/refresh-token.Dockerfile

@@ -1,5 +1,5 @@
 # Build the hubagent binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.6 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.23.8 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

go.mod

@@ -1,6 +1,6 @@
 module github.com/kubefleet-dev/kubefleet
 
-go 1.23.6
+go 1.23.8
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0