Shankar 8fe00870e4 chore: bump Go to 1.25.9 to patch 4 stdlib CVEs ...

Go 1.25.9 (released Apr 7 2026) fixes:
- GO-2026-4947: unexpected work during chain building in crypto/x509
- GO-2026-4946: inefficient policy validation in crypto/x509
- GO-2026-4870: unauthenticated TLS 1.3 KeyUpdate DoS in crypto/tls
- GO-2026-4865: JsBraceDepth context tracking XSS in html/template

Update CI workflow and go.mod to pin 1.25.9. govulncheck now reports
0 vulnerabilities in called code.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-09 23:33:25 -04:00

..

workflows

chore: bump Go to 1.25.9 to patch 4 stdlib CVEs

2026-04-09 23:33:25 -04:00