Introduction

On October 14, 2025, we released v0.4.3 of iapheaders, a maintenance release focused on keeping the project’s infrastructure and tooling current. This update brings significant Go runtime modernization, upgrading from Go 1.24.3 to Go 1.25.2, along with important GitHub Actions dependency updates across our CI/CD pipelines.

For users of iapheaders—the GCP Identity-Aware Proxy header inspection tool—this release maintains full backward compatibility while ensuring the project benefits from the latest runtime improvements and security scanning capabilities.

What’s New

Go Runtime Modernization

The centerpiece of v0.4.3 is a comprehensive Go version upgrade. Over the past five months, the project has incrementally advanced through multiple Go releases, culminating in adoption of Go 1.25.2:

  • Upgraded from Go 1.24.3 → 1.24.4 → 1.24.5 → 1.24.6
  • Progressed to Go 1.25.0, then 1.25.1, and finally 1.25.2

This modernization ensures iapheaders leverages the latest performance optimizations, language improvements, and security patches from the Go team.

CI/CD Pipeline Updates

Our GitHub Actions workflows received major version upgrades across the board:

  • actions/checkout → v5
  • actions/setup-go → v6
  • actions/attest-build-provenance → v3
  • github/codeql-action → v4
  • astral-sh/setup-uv → v7

These updates keep our build infrastructure aligned with the latest features and security practices from the GitHub Actions ecosystem.

Build Process Improvements

A subtle but important change: our CI build process now uses go mod download instead of go mod tidy. This shift ensures more deterministic builds that don’t modify dependency files during CI runs, leading to more reliable and reproducible builds.

Documentation Enhancements

We’ve added a Go Report Card badge to the README, giving users at-a-glance visibility into the project’s code quality metrics.

Why It Matters

Security First

Updated security tooling means better protection for all users. The CodeQL action upgrade to v4 brings improved static analysis capabilities, helping us catch potential vulnerabilities earlier in the development cycle. Meanwhile, running on the latest Go version ensures we benefit from any security patches incorporated into the runtime.

Build Reliability

The move toward more deterministic builds addresses a common pain point in CI/CD: unpredictable dependency resolution. By using go mod download instead of go mod tidy, we ensure that our published artifacts are built with exactly the dependencies declared in our module files.

Future-Proofing

Adopting Go 1.25.2 positions iapheaders to take advantage of upcoming language features and performance improvements. For developers contributing to or extending the project, this means working with a modern, well-supported toolchain.

Installation and Upgrade

Docker Users

If you’re deploying iapheaders via Docker, upgrading is straightforward:

docker pull ghcr.io/unitvectory-labs/iapheaders:latest

The container includes the updated Go runtime internally, so no changes to your deployment configuration are needed.

Source Builds

For those building from source, ensure you have Go 1.25.2 installed:

go mod download
go build -o iapheaders .

Note: If you’re coming from an earlier version and have local development changes, run go mod tidy to update your local dependency state before building.

Verification

After upgrading, verify your installation:

docker run --rm ghcr.io/unitvectory-labs/iapheaders:latest
# Or for source builds:
./iapheaders --version

Looking Forward

This maintenance release demonstrates our commitment to keeping iapheaders current and secure. While v0.4.3 doesn’t introduce new application features, it lays important groundwork for future development by ensuring our toolchain and infrastructure remain modern and reliable.

We encourage users to upgrade at their convenience. As always, the project remains fully backward compatible—your existing deployments will continue to work without modification.

This post was AI-generated using the unsloth/Qwen3.5-122B-A10B-GGUF:Q4_K_M model. It was generated for release v0.4.3 of UnitVectorY-Labs/iapheaders on October 14, 2025. Author: release-storyteller