Update to go 1.25.8 to fix multiple CVEs

This fixes the following CVEs

- CVE-2026-27137
- CVE-2026-27138
- CVE-2026-25679
- CVE-2026-27142

This disables the go1.24 build as the updates no longer build on go1.24

Fixes #9220
This commit is contained in:
Nick Craig-Wood
2026-03-06 12:57:34 +00:00
parent 41fb73c669
commit 5f149a91c4

View File

@@ -29,12 +29,12 @@ jobs:
strategy:
fail-fast: false
matrix:
job_name: ['linux', 'linux_386', 'mac_amd64', 'mac_arm64', 'windows', 'other_os', 'go1.24']
job_name: ['linux', 'linux_386', 'mac_amd64', 'mac_arm64', 'windows', 'other_os']
include:
- job_name: linux
os: ubuntu-latest
go: '~1.25.7'
go: '~1.25.8'
gotags: cmount
build_flags: '-include "^linux/"'
check: true
@@ -45,14 +45,14 @@ jobs:
- job_name: linux_386
os: ubuntu-latest
go: '~1.25.7'
go: '~1.25.8'
goarch: 386
gotags: cmount
quicktest: true
- job_name: mac_amd64
os: macos-latest
go: '~1.25.7'
go: '~1.25.8'
gotags: 'cmount'
build_flags: '-include "^darwin/amd64" -cgo'
quicktest: true
@@ -61,14 +61,14 @@ jobs:
- job_name: mac_arm64
os: macos-latest
go: '~1.25.7'
go: '~1.25.8'
gotags: 'cmount'
build_flags: '-include "^darwin/arm64" -cgo -macos-arch arm64 -cgo-cflags=-I/usr/local/include -cgo-ldflags=-L/usr/local/lib'
deploy: true
- job_name: windows
os: windows-latest
go: '~1.25.7'
go: '~1.25.8'
gotags: cmount
cgo: '0'
build_flags: '-include "^windows/"'
@@ -78,17 +78,11 @@ jobs:
- job_name: other_os
os: ubuntu-latest
go: '~1.25.7'
go: '~1.25.8'
build_flags: '-exclude "^(windows/|darwin/|linux/)"'
compile_all: true
deploy: true
- job_name: go1.24
os: ubuntu-latest
go: '1.24'
quicktest: true
racequicktest: true
name: ${{ matrix.job_name }}
runs-on: ${{ matrix.os }}
@@ -224,7 +218,7 @@ jobs:
id: setup-go
uses: actions/setup-go@v6
with:
go-version: '~1.24.0'
go-version: '~1.25.8'
check-latest: true
cache: false
@@ -315,7 +309,7 @@ jobs:
- name: Set up Go
uses: actions/setup-go@v6
with:
go-version: '~1.25.7'
go-version: '~1.25.8'
- name: Set global environment variables
run: |