build: update CI+release version to Go 1.25.5
What changed, and why it matters
This commit simply updates the version of the Go programming language used to build LND from 1.25.3 to 1.25.5 across CI, release, and Docker configuration files. It is a routine build/toolchain maintenance change with no direct security-relevant code modifications visible in the diff.
No security action required. Treat as normal dependency/toolchain maintenance. If Go 1.25.5 itself contains security fixes, those would be relevant to the Go runtime, but that is outside the scope of this LND commit and should be tracked via the Go project release notes.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch is a mechanical version bump: all occurrences of the Go toolchain reference are changed from 1.25.3 to 1.25.5 in GitHub Actions workflows, Makefile, golangci-lint config, and multiple Dockerfiles. No application source code, cryptographic logic, network handling, or privilege boundaries are modified. The change does not, by itself, introduce or fix any vulnerability in LND.
Changed components
CI/CD configuration (.github/workflows/main.yml, .github/workflows/release.yaml, .github/actions/setup-go/action.yml)Linting configuration (.golangci.yml)Build configuration (Makefile)Docker images (Dockerfile, dev.Dockerfile, docker/btcd/Dockerfile, lnrpc/Dockerfile, make/builder.Dockerfile, tools/Dockerfile)Protobuf generation script (lnrpc/gen_protos_docker.sh)Inspect captured patch +12 / −12
diff --git a/.github/actions/setup-go/action.yml b/.github/actions/setup-go/action.yml
index 141097e..09f47d7 100644
--- a/.github/actions/setup-go/action.yml
+++ b/.github/actions/setup-go/action.yml
@@ -52,7 +52,7 @@ runs:
# The key is used to create and later look up the cache. It's made of
# four parts:
# - The base part is made from the OS name, Go version and a
- # job-specified key prefix. Example: `linux-go-1.25.3-unit-test-`.
+ # job-specified key prefix. Example: `linux-go-1.25.5-unit-test-`.
# It ensures that a job running on Linux with Go 1.25 only looks for
# caches from the same environment.
# - The unique part is the `hashFiles('**/go.sum')`, which calculates a
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 5f49e64..8d5bba9 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -40,7 +40,7 @@ env:
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
- GO_VERSION: 1.25.3
+ GO_VERSION: 1.25.5
jobs:
static-checks:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 64b768f..012a716 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -12,7 +12,7 @@ defaults:
env:
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
- GO_VERSION: 1.25.3
+ GO_VERSION: 1.25.5
jobs:
########################
diff --git a/.golangci.yml b/.golangci.yml
index 3225c5c..0508225 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -3,7 +3,7 @@ version: "2"
run:
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
- go: "1.25.3"
+ go: "1.25.5"
# Abort after 10 minutes.
timeout: 10m
diff --git a/Dockerfile b/Dockerfile
index e28726d..a152d91 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.25.3-alpine as builder
+FROM golang:1.25.5-alpine as builder
# Force Go to use the cgo based DNS resolver. This is required to ensure DNS
# queries required to connect to linked containers succeed.
diff --git a/Makefile b/Makefile
index c78e6e9..bba3573 100644
--- a/Makefile
+++ b/Makefile
@@ -32,7 +32,7 @@ ACTIVE_GO_VERSION_MINOR := $(shell echo $(ACTIVE_GO_VERSION) | cut -d. -f2)
# GO_VERSION is the Go version used for the release build, docker files, and
# GitHub Actions. This is the reference version for the project. All other Go
# versions are checked against this version.
-GO_VERSION = 1.25.3
+GO_VERSION = 1.25.5
GOBUILD := $(GOCC) build -v
GOINSTALL := $(GOCC) install -v
diff --git a/dev.Dockerfile b/dev.Dockerfile
index 41a9b66..4d681d8 100644
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.25.3-alpine AS builder
+FROM golang:1.25.5-alpine AS builder
LABEL maintainer="Olaoluwa Osuntokun <laolu@lightning.engineering>"
diff --git a/docker/btcd/Dockerfile b/docker/btcd/Dockerfile
index 699c346..97ab32d 100644
--- a/docker/btcd/Dockerfile
+++ b/docker/btcd/Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.25.3-alpine as builder
+FROM golang:1.25.5-alpine as builder
LABEL maintainer="Olaoluwa Osuntokun <laolu@lightning.engineering>"
diff --git a/lnrpc/Dockerfile b/lnrpc/Dockerfile
index 431eeb2..680a774 100644
--- a/lnrpc/Dockerfile
+++ b/lnrpc/Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.25.3-bookworm
+FROM golang:1.25.5-bookworm
RUN apt-get update && apt-get install -y \
git \
diff --git a/lnrpc/gen_protos_docker.sh b/lnrpc/gen_protos_docker.sh
index 604c3bb..68c6558 100755
--- a/lnrpc/gen_protos_docker.sh
+++ b/lnrpc/gen_protos_docker.sh
@@ -6,7 +6,7 @@ set -e
DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
# golang docker image version used in this script.
-GO_IMAGE=docker.io/library/golang:1.25.3-alpine
+GO_IMAGE=docker.io/library/golang:1.25.5-alpine
PROTOBUF_VERSION=$(docker run --rm -v $DIR/../:/lnd -w /lnd $GO_IMAGE \
go list -f '{{.Version}}' -m google.golang.org/protobuf)
diff --git a/make/builder.Dockerfile b/make/builder.Dockerfile
index c85ddbd..99d4aec 100644
--- a/make/builder.Dockerfile
+++ b/make/builder.Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.25.3-bookworm
+FROM golang:1.25.5-bookworm
MAINTAINER Olaoluwa Osuntokun <laolu@lightning.engineering>
diff --git a/tools/Dockerfile b/tools/Dockerfile
index b0e660f..986edda 100644
--- a/tools/Dockerfile
+++ b/tools/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.25.3
+FROM golang:1.25.5
RUN apt-get update && apt-get install -y git
ENV GOCACHE=/tmp/build/.cache
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.