From 614e4e636b210230998a77bdf48f2fc85deaef3a Mon Sep 17 00:00:00 2001 From: shankar0123 Date: Thu, 9 Apr 2026 23:33:25 -0400 Subject: [PATCH] chore: bump Go to 1.25.9 to patch 4 stdlib CVEs Go 1.25.9 (released Apr 7 2026) fixes: - GO-2026-4947: unexpected work during chain building in crypto/x509 - GO-2026-4946: inefficient policy validation in crypto/x509 - GO-2026-4870: unauthenticated TLS 1.3 KeyUpdate DoS in crypto/tls - GO-2026-4865: JsBraceDepth context tracking XSS in html/template Update CI workflow and go.mod to pin 1.25.9. govulncheck now reports 0 vulnerabilities in called code. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/ci.yml | 2 +- go.mod | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 210dbff..862f68f 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -19,7 +19,7 @@ jobs: - name: Set up Go uses: actions/setup-go@v5 with: - go-version: '1.25' + go-version: '1.25.9' - name: Go Build run: | diff --git a/go.mod b/go.mod index e1db670..0118009 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/shankar0123/certctl -go 1.25.0 +go 1.25.9 require ( github.com/google/uuid v1.6.0