feat: use golang 1.25.0

.github/workflows/build.yml

@@ -23,7 +23,7 @@ jobs:
       - uses: actions/checkout@v6
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - uses: technote-space/[email protected]
         id: git_diff

.github/workflows/dependabot-update-all.yml

@@ -26,7 +26,7 @@ jobs:
           token: "${{ steps.app-token.outputs.token }}"
       - uses: actions/setup-go@v6
         with:
-          go-version: "1.24"
+          go-version: "1.25.0"
           check-latest: true
       - name: Extract updated dependency
         id: deps

.github/workflows/dependencies-review.yml

@@ -15,7 +15,7 @@ jobs:
       - name: "Setup Go"
         uses: actions/setup-go@v6
         with:
-          go-version: "1.24"
+          go-version: "1.25.0"
           check-latest: true
       - name: "Dependency Review"
         uses: actions/dependency-review-action@v4
@@ -41,4 +41,4 @@ jobs:
             fi
           done
 
-          echo "Only known vulnerability (GO-2025-3443) present. Continuing."
+          echo "Only known vulnerability (GO-2025-3443) present. Continuing."

.github/workflows/dependencies.yml

@@ -10,7 +10,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - name: "Checkout Repository"
         uses: actions/checkout@v6

.github/workflows/goreleaser.yml

@@ -15,7 +15,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - name: release dry run
         run: make release-dry-run
@@ -25,4 +25,4 @@ jobs:
         run: |-
           echo 'GITHUB_TOKEN=${{secrets.GITHUB_TOKEN}}' > .release-env
       - name: release publish
-        run: make release
+        run: make release

.github/workflows/lint.yml

@@ -21,7 +21,7 @@ jobs:
       # Required: setup-go, for all versions v3.0.0+ of golangci-lint
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - uses: actions/checkout@v6
       - uses: technote-space/[email protected]

.github/workflows/test.yml

@@ -24,7 +24,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - uses: actions/checkout@v6
       - uses: technote-space/[email protected]
@@ -51,7 +51,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - uses: actions/checkout@v6
       - uses: technote-space/[email protected]
@@ -72,7 +72,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - uses: actions/checkout@v6
       - uses: technote-space/[email protected]
@@ -154,7 +154,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - uses: actions/checkout@v6
       - uses: technote-space/[email protected]
@@ -174,7 +174,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - uses: actions/checkout@v6
       - uses: technote-space/[email protected]
@@ -194,7 +194,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - uses: actions/checkout@v6
       - uses: technote-space/[email protected]
@@ -214,7 +214,7 @@ jobs:
     steps:
       - uses: actions/setup-go@v6
         with:
-          go-version: 1.23
+          go-version: "1.25.0"
           check-latest: true
       - uses: actions/checkout@v6
       - uses: technote-space/[email protected]

CHANGELOG.md

@@ -36,7 +36,7 @@ Ref: https://keepachangelog.com/en/1.0.0/
 # Changelog
 
 ## Unreleased
-
+* (go) [#787](https://github.com/crypto-org-chain/ethermint/pull/787) feat: use golang 1.25.0.
 * (evm) [#725](https://github.com/crypto-org-chain/ethermint/pull/725) feat(RPC): add authorizationList from eth_getTransactionByHash response for EIP-7702 transactions
 * (evm) [#740](https://github.com/crypto-org-chain/ethermint/pull/740) fix: missing tx context during vm initialisation
 * (evm) [#742](https://github.com/crypto-org-chain/ethermint/pull/742) fix: prevent nil pointer dereference in tracer hooks

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:alpine AS build-env
+FROM golang:1.25.0-alpine AS build-env
 
 # Set up dependencies
 ENV PACKAGES git build-base

Makefile

@@ -176,7 +176,7 @@ build-all: tools build lint test vulncheck
 ###############################################################################
 
 PACKAGE_NAME:=github.com/evmos/ethermint
-GOLANG_CROSS_VERSION = v1.19
+GOLANG_CROSS_VERSION = v1.25.0
 GOPATH ?= '$(HOME)/go'
 release-dry-run:
 	docker run \

README.md

@@ -40,7 +40,7 @@ parent:
 
 Ethermint is a scalable and interoperable Ethereum library, built on Proof-of-Stake with fast-finality using the [Cosmos SDK](https://github.com/cosmos/cosmos-sdk/) which runs on top of [Tendermint Core](https://github.com/tendermint/tendermint) consensus engine.
 
-**Note**: Requires [Go 1.19+](https://golang.org/dl/)
+**Note**: Requires [Go 1.25.0+](https://golang.org/dl/)
 
 ## Installation
 

SECURITY.md

@@ -20,8 +20,9 @@ If you follow these guidelines when reporting an issue to us, we commit to:
 
 Evmos uses the following disclosure process:
 
-1. Once a security report is received via the Immunefi Bug Bounty program, the team works to verify the issue and confirm its severity level using [CVSS](https://nvd.nist.gov/vuln-metrics/cvss) or [Immunefi’s Vulnerability Severity Classification System v2.2](https://immunefi.com/immunefi-vulnerability-severity-classification-system-v2-2/).
-    1. Two people from the affected project will review, replicate and acknowledge the report within 48-96 hours of the alert according to the table below:
+    1. Once a security report is received via the Immunefi Bug Bounty program, the team works to verify the issue and confirm its severity level using [CVSS](https://nvd.nist.gov/vuln-metrics/cvss) or [Immunefi’s Vulnerability Severity Classification System v2.2](https://immunefi.com/immunefi-vulnerability-severity-classification-system-v2-2/).
+        1. Two people from the affected project will review, replicate and acknowledge the report within 48-96 hours of the alert according to the table below:
+
         | Security Level       | Hours to First Response (ACK) from Escalation |
         | -------------------- | --------------------------------------------- |
         | Critical             | 48                                            |
@@ -30,6 +31,7 @@ Evmos uses the following disclosure process:
         | Low or Informational | 96                                            |
         | None                 | 96                                            |
 
+
     2. If the report is not applicable or reproducible, the Security Lead (or Security Secondary) will revert to the reporter to request more info or close the report.
     3. The report is confirmed by the Security Lead to the reporter.
 2. The team determines the vulnerability’s potential impact on Evmos.

default.nix

@@ -1,6 +1,7 @@
 {
   lib,
   buildGoApplication,
+  buildPackages,
   rev ? "dirty",
 }:
 let
@@ -22,10 +23,12 @@ buildGoApplication rec {
     tags
     ldflags
     ;
+  go = buildPackages.go_1_25;
   src = lib.sourceByRegex ./. [
     "^(x|ante|evmd|cmd|client|server|crypto|rpc|types|encoding|ethereum|indexer|testutil|version|store|go.mod|go.sum|gomod2nix.toml)($|/.*)"
     "^tests(/.*[.]go)?$"
   ];
+  modRoot = ".";
   modules = ./gomod2nix.toml;
   doCheck = false;
   pwd = src; # needed to support replace

flake.nix

@@ -1,6 +1,6 @@
 {
   inputs = {
-    nixpkgs.url = "github:NixOS/nixpkgs/release-24.05";
+    nixpkgs.url = "github:NixOS/nixpkgs/release-25.11";
     flake-utils.url = "github:numtide/flake-utils";
     gomod2nix = {
       url = "github:nix-community/gomod2nix";
@@ -32,14 +32,27 @@
     (flake-utils.lib.eachDefaultSystem (
       system:
       let
+        # Custom gomod2nix overlay that avoids darwin.apple_sdk_11_0 reference
+        gomodOverlay = final: prev:
+          let
+            gomodSrc = gomod2nix.outPath;
+            callPackage = final.callPackage;
+            gomodBuilder = callPackage "${gomodSrc}/builder" { };
+          in
+          {
+            inherit (gomodBuilder) buildGoApplication mkGoEnv mkVendorEnv;
+            gomod2nix = (callPackage "${gomodSrc}/default.nix" { }).overrideAttrs (_: {
+              modRoot = ".";
+            });
+          };
+
         pkgs = import nixpkgs {
           inherit system;
           overlays = [
-            gomod2nix.overlays.default
+            gomodOverlay
             poetry2nix.overlays.default
           ]
           ++ self.overlays.default;
-          config = { };
         };
       in
       rec {

go.mod

@@ -1,6 +1,6 @@
 module github.com/evmos/ethermint
 
-go 1.23.12
+go 1.25.0
 
 require (
 	cosmossdk.io/api v0.9.2

networks/local/ethermintnode/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:stretch as build-env
+FROM golang:1.25.0 as build-env
 
 # Install minimum necessary dependencies
 ENV PACKAGES curl make git libc-dev bash gcc
@@ -15,7 +15,7 @@ COPY . .
 RUN make build-linux
 
 # Final image
-FROM golang:1.19 as final
+FROM golang:1.25.0 as final
 
 WORKDIR /
 
@@ -28,4 +28,4 @@ COPY --from=build-env /go/src/github.com/evmos/ethermint/scripts/start-docker.sh
 EXPOSE 26656 26657 1317 8545 8546
 
 # Run ethermintd by default, omit entrypoint to ease using container with ethermintd
-ENTRYPOINT ["/bin/bash", "-c"]
+ENTRYPOINT ["/bin/bash", "-c"]

nix/build_overlay.nix

@@ -1,21 +1,6 @@
 # some basic overlays necessary for the build
 final: super:
-let
-  replaceLast =
-    newVal: l:
-    let
-      len = builtins.length l;
-    in
-    if len == 0 then [ ] else final.lib.lists.take (len - 1) l ++ [ newVal ];
-in
 {
-  go_1_23 = super.go_1_23.overrideAttrs (old: rec {
-    version = "1.23.12";
-    src = final.fetchurl {
-      url = "https://go.dev/dl/go${version}.src.tar.gz";
-      hash = "sha256-4czpN5ok6JVxSkEsfd0VfSYU2e2+g6hESbbhhAtPEiY=";
-    };
-    # https://github.com/NixOS/nixpkgs/pull/372367
-    patches = replaceLast ./go_no_vendor_checks-1.23.patch old.patches;
-  });
+  # nixpkgs 25.11 has go_1_25
+  go = super.go_1_25;
 }