Bumped up key dependencies and pinned Cloud Build image to the last version with Docker preinstalled

Author: balamut-google

ci/cloudbuild/release-and-test.yaml

@@ -24,7 +24,7 @@ options:
   machineType: "N1_HIGHCPU_8"
 
 substitutions:
-  _CLOUDSDK_IMAGE: "gcr.io/google.com/cloudsdktool/cloud-sdk:alpine"
+  _CLOUDSDK_IMAGE: "gcr.io/google.com/cloudsdktool/cloud-sdk:528.0.0-alpine"
   _RELEASE_BUCKET: ""
   _EXPORT_BUCKET: ""
   _EXPORT_JOB_NAME: ""

ci/cloudbuild/scheduled/reap-gke-clusters/Dockerfile

@@ -12,6 +12,6 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM gcr.io/google.com/cloudsdktool/cloud-sdk:alpine
+FROM gcr.io/google.com/cloudsdktool/cloud-sdk:528.0.0-alpine
 WORKDIR /scripts
 COPY . .

ci/cloudbuild/scheduled/reap-gke-clusters/build-image.yaml

@@ -23,7 +23,7 @@
 images: ["gcr.io/${PROJECT_ID}/reap-gke-clusters"]
 steps:
 - id: create script container
-  name: gcr.io/google.com/cloudsdktool/cloud-sdk:alpine
+  name: gcr.io/google.com/cloudsdktool/cloud-sdk:528.0.0-alpine
   dir: /workspace/reap-gke-clusters
   entrypoint: docker
   args: ["build", "-t", "gcr.io/${PROJECT_ID}/reap-gke-clusters", "."]

ci/cloudbuild/test-many.yaml

@@ -39,7 +39,7 @@ steps:
 - id: run test scenarios
   timeout: 7200s
   entrypoint: python3
-  name: gcr.io/google.com/cloudsdktool/cloud-sdk:alpine
+  name: gcr.io/google.com/cloudsdktool/cloud-sdk:528.0.0-alpine
   args:
   - ci/cloudbuild/scripts/run_tests.py
   - ${_FULL_RELEASE_BUCKET}

ci/cloudbuild/test.yaml

@@ -102,8 +102,8 @@ substitutions:
   _SELF_SIGNED_CERTS_BROKER_URL: ''
 
   _KO_IMAGE: 'gcr.io/kf-releases/ko:latest'
-  _CLOUDSDK_IMAGE: "gcr.io/google.com/cloudsdktool/cloud-sdk:alpine"
-  _GOLANG_IMAGE: 'golang:1.24'
+  _CLOUDSDK_IMAGE: "gcr.io/google.com/cloudsdktool/cloud-sdk:528.0.0-alpine"
+  _GOLANG_IMAGE: 'golang:1.25'
 
 steps:
 - id: check substitutions

ci/cloudbuild/unit-test.yaml

@@ -24,7 +24,7 @@ timeout: 7200s
 options:
   machineType: "E2_HIGHCPU_8"
 substitutions:
-  _GOLANG_IMAGE: "golang:1.24"
+  _GOLANG_IMAGE: "golang:1.25"
 
 steps:
   - id: verify build

cmd/generate-release/scripts/install-asm.bash

@@ -33,7 +33,7 @@ else
     echo "gcloud CLI is already available, skipping installation"
 fi
 
-curl https://storage.googleapis.com/csm-artifacts/asm/asmcli_1.25 >asmcli
+curl https://storage.googleapis.com/csm-artifacts/asm/asmcli_1.27 >asmcli
 chmod +x asmcli
 
 gcloud container clusters get-credentials "${CLUSTER_NAME}" \
@@ -67,5 +67,5 @@ else
     kubectl label namespace asm-gateways istio-injection- istio.io/rev="$REVISION" --overwrite
 fi
 
-# https://github.com/GoogleCloudPlatform/anthos-service-mesh-packages/tree/release-1.25/samples/gateways/istio-ingressgateway
+# https://github.com/GoogleCloudPlatform/anthos-service-mesh-packages/tree/release-1.27/samples/gateways/istio-ingressgateway
 kubectl apply -n asm-gateways -f out/samples/gateways/istio-ingressgateway/

pkg/kf/commands/dependencies/dependencies.go

@@ -108,7 +108,7 @@ func newDependencies() []dependency {
 			// dep matrix right now is fairly impossible. To ensure we still
 			// testing against the right version though, we are going to hard
 			// code this.
-			ResolveVersion: staticVersionResolver("v0.70.0"),
+			ResolveVersion: staticVersionResolver("v1.3.2"),
 			ResolveURL: func(version string) (string, error) {
 				const URL = "https://github.com/tektoncd/pipeline/releases/download/%s/release.yaml"
 				return fmt.Sprintf(URL, version), nil
@@ -120,7 +120,7 @@ func newDependencies() []dependency {
 			InfoURL:    "https://cloud.google.com/service-mesh/docs/gke-install-overview",
 			// This version is fetched from the asmcli script. It needs to be
 			// updated by hand until we have a programtic way to fetch it.
-			ResolveVersion: staticVersionResolver("1.25.0-asm.8+config1"),
+			ResolveVersion: staticVersionResolver("1.27.1-asm.2+config1"),
 			ResolveURL: func(version string) (string, error) {
 				const URL = "https://github.com/GoogleCloudPlatform/anthos-service-mesh-packages/releases/tag/%s"
 				return fmt.Sprintf(URL, version), nil