[Snyk] Security upgrade golang from 1.12.4-alpine to 1.25.3-alpine

[heratech]

Snyk has created this PR to fix 3 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• Dockerfile-e2e

We recommend upgrading to golang:1.25.3-alpine, as this image has only 0 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	NULL Pointer Dereference SNYK-ALPINE39-OPENSSL-588029	721
	NULL Pointer Dereference SNYK-ALPINE39-OPENSSL-588029	721
	Out-of-bounds Write SNYK-ALPINE39-MUSL-458529	714
	Out-of-bounds Write SNYK-ALPINE39-MUSL-458529	714
	NULL Pointer Dereference SNYK-ALPINE39-OPENSSL-1089231	621

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 NULL Pointer Dereference

[macroscopeapp]

Upgrade the e2e Docker build base image for security by changing Dockerfile-e2e from golang:1.12.4-alpine to golang:1.25.3-alpine

The e2e Docker image is updated to use Go 1.25.3 on Alpine instead of Go 1.12.4 on Alpine by modifying the base image tag in the build configuration.

• Update Dockerfile-e2e to reference golang:1.25.3-alpine instead of golang:1.12.4-alpine Dockerfile-e2e

📍Where to Start

Begin with the base image declaration in Dockerfile-e2e to review the change from golang:1.12.4-alpine to golang:1.25.3-alpine.

---

Macroscope summarized 3d51e74.

[gitstream-cm]

Please mark whether you used AI to assist coding in this PR

• AI Assisted
• Not AI Assisted

[gitstream-cm]

✨ PR Review

This PR attempts to upgrade the Golang base image for security reasons, but there are significant concerns about the target version and potential compatibility issues.

2 issues detected:

🐞 Bug - Attempting to use a non-existent Docker image tag that will cause build failures.

Details: The specified Golang version 1.25.3-alpine does not exist. Go versioning typically follows semantic versioning with incremental releases (e.g., 1.20, 1.21, 1.22). This will cause the Docker build to fail when trying to pull this non-existent image.
File: Dockerfile-e2e (1-1)

🐞 Bug - Major version jumps without proper testing can break existing functionality due to language and API changes.

Details: Upgrading from Go 1.12.4 to 1.25.x represents a massive version jump spanning multiple major releases. This could introduce significant breaking changes in language features, standard library APIs, and build behavior that may cause compilation errors or runtime issues.
File: Dockerfile-e2e (1-1)

Generated by LinearB AI and added by gitStream.
_{AI-generated content may contain inaccuracies. Please verify before using. We'd love your feedback! 🚀}

[gitstream-cm]

🐞 Bug - Invalid Version: Verify the latest available Golang Alpine version and use a valid version number. Check the official Golang Docker Hub repository for available tags.

Suggested change

	FROM golang:1.25.3-alpine
	FROM golang:1.22-alpine

[gitstream-cm]

🐞 Bug - Breaking Changes: Test the upgrade incrementally through intermediate versions, review Go release notes for breaking changes, and thoroughly test the application after the upgrade to ensure compatibility.

Suggested change

	FROM golang:1.25.3-alpine
	FROM golang:1.23.4-alpine