chore(core): bump go dependencies for cve fixes

Signed-off-by: Dmitry Lopatin <dmitry.lopatin@flant.com>

Author: LopatinDmitr

.github/workflows/dev_module_build-and-registration.yml

@@ -25,7 +25,7 @@ env:
   MODULES_MODULE_TAG: ${{ github.event.inputs.tag }}
   SOURCE_REPO: "${{secrets.SOURCE_REPO}}"
   SOURCE_REPO_GIT: "${{secrets.SOURCE_REPO_GIT}}"
-  GO_VERSION: "1.24.13"
+  GO_VERSION: "1.25.8"
   MODULE_EDITION: "EE"
 
 on:

.github/workflows/dev_module_build.yml

@@ -21,7 +21,7 @@ env:
   MODULES_MODULE_SOURCE: ${{ vars.DEV_MODULE_SOURCE }}
   MODULES_REGISTRY_LOGIN: ${{ vars.DEV_MODULES_REGISTRY_LOGIN }}
   MODULES_REGISTRY_PASSWORD: ${{ secrets.DEV_MODULES_REGISTRY_PASSWORD }}
-  GO_VERSION: "1.24.13"
+  GO_VERSION: "1.25.8"
   GOLANGCI_LINT_VERSION: "1.64.8"
   SOURCE_REPO: "${{secrets.SOURCE_REPO}}"
   SOURCE_REPO_GIT: "${{secrets.SOURCE_REPO_GIT}}"

.github/workflows/dev_validation.yaml

@@ -15,7 +15,7 @@
 name: Validations
 
 env:
-  GO_VERSION: "1.24.13"
+  GO_VERSION: "1.25.8"
 on:
   pull_request:
     types: [opened, synchronize, labeled, unlabeled]
@@ -158,9 +158,9 @@ jobs:
       matrix:
         # Define two groups of components with their respective Go versions
         components:
-          - { component: virtualization-artifact, go-version: "1.24.13" }
-          - { component: vm-route-forge, go-version: "1.24.13" }
-          - { component: api, go-version: "1.24.13" }
+          - { component: virtualization-artifact, go-version: "1.25.8" }
+          - { component: vm-route-forge, go-version: "1.25.8" }
+          - { component: api, go-version: "1.25.8" }
 
     steps:
       - name: Set skip flag

api/client/examples/cancel-evacuation/go.mod

@@ -2,7 +2,7 @@ module github.com/deckhouse/virtualization/api/client/examples/cancel-evacuation
 
 replace github.com/deckhouse/virtualization/api => ./../../../../api
 
-go 1.24.13
+go 1.25.8
 
 require (
 	github.com/deckhouse/virtualization/api v0.0.0-00010101000000-000000000000

api/client/examples/list-resources/go.mod

@@ -1,6 +1,6 @@
 module github.com/deckhouse/virtualization/api/client/examples/list-resources
 
-go 1.24.13
+go 1.25.8
 
 require (
 	github.com/deckhouse/virtualization/api v0.0.0-20240322104947-2d492906a8b2

api/go.mod

@@ -1,6 +1,6 @@
 module github.com/deckhouse/virtualization/api
 
-go 1.24.13
+go 1.25.8
 
 tool (
 	k8s.io/code-generator

build/base-images/deckhouse_images.yml

@@ -3,8 +3,8 @@ firmware:
   libvirt: v10.9.0
   edk2: stable202411
 core:
-  3p-kubevirt: v1.3.1-v12n.12-cse.4
-  3p-containerized-data-importer: v1.60.3-v12n.10-cse.4
+  3p-kubevirt: fix-cve-for-cse
+  3p-containerized-data-importer: fix/cve/cve-mitigation-2
   distribution: 2.8.3
 package:
   acl: v2.3.1

build/components/versions.yml

@@ -34,3 +34,6 @@ shell:
       cp -af /$pkg/. /
       rm -rf /$pkg
     done
+
+    rm -f /var/lib/rpm/__db*
+    rpm -v --rebuilddb

images/base-alt-p11-binaries/werf.inc.yaml

@@ -12,7 +12,7 @@ imageSpec:
 ---
 image: {{ .ModuleNamePrefix }}{{ .ImageName }}-cbuilder
 final: false
-fromImage: {{ eq $.SVACE_ENABLED "false" | ternary "builder/golang-alt-1.24" "builder/golang-alt-svace-1.24" }}
+fromImage: {{ eq $.SVACE_ENABLED "false" | ternary "builder/golang-alt-1.25" "builder/golang-alt-svace-1.25" }}
 git:
   - add: {{ .ModuleDir }}/images/{{ .ImageName }}/static_binaries
     to: /static_binaries