From 5f149a91c49bf7b85167bf408ecf58ce4d271467 Mon Sep 17 00:00:00 2001
From: Nick Craig-Wood <nick@craig-wood.com>
Date: Fri, 6 Mar 2026 12:57:34 +0000
Subject: [PATCH] Update to go 1.25.8 to fix multiple CVEs

This fixes the following CVEs

- CVE-2026-27137
- CVE-2026-27138
- CVE-2026-25679
- CVE-2026-27142

This disables the go1.24 build as the updates no longer build on go1.24

Fixes #9220
---
 .github/workflows/build.yml | 24 +++++++++---------------
 1 file changed, 9 insertions(+), 15 deletions(-)

diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 1c078c5c7..9ed966690 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -29,12 +29,12 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        job_name: ['linux', 'linux_386', 'mac_amd64', 'mac_arm64', 'windows', 'other_os', 'go1.24']
+        job_name: ['linux', 'linux_386', 'mac_amd64', 'mac_arm64', 'windows', 'other_os']
 
         include:
           - job_name: linux
             os: ubuntu-latest
-            go: '~1.25.7'
+            go: '~1.25.8'
             gotags: cmount
             build_flags: '-include "^linux/"'
             check: true
@@ -45,14 +45,14 @@ jobs:
 
           - job_name: linux_386
             os: ubuntu-latest
-            go: '~1.25.7'
+            go: '~1.25.8'
             goarch: 386
             gotags: cmount
             quicktest: true
 
           - job_name: mac_amd64
             os: macos-latest
-            go: '~1.25.7'
+            go: '~1.25.8'
             gotags: 'cmount'
             build_flags: '-include "^darwin/amd64" -cgo'
             quicktest: true
@@ -61,14 +61,14 @@ jobs:
 
           - job_name: mac_arm64
             os: macos-latest
-            go: '~1.25.7'
+            go: '~1.25.8'
             gotags: 'cmount'
             build_flags: '-include "^darwin/arm64" -cgo -macos-arch arm64 -cgo-cflags=-I/usr/local/include -cgo-ldflags=-L/usr/local/lib'
             deploy: true
 
           - job_name: windows
             os: windows-latest
-            go: '~1.25.7'
+            go: '~1.25.8'
             gotags: cmount
             cgo: '0'
             build_flags: '-include "^windows/"'
@@ -78,17 +78,11 @@ jobs:
 
           - job_name: other_os
             os: ubuntu-latest
-            go: '~1.25.7'
+            go: '~1.25.8'
             build_flags: '-exclude "^(windows/|darwin/|linux/)"'
             compile_all: true
             deploy: true
 
-          - job_name: go1.24
-            os: ubuntu-latest
-            go: '1.24'
-            quicktest: true
-            racequicktest: true
-
     name: ${{ matrix.job_name }}
 
     runs-on: ${{ matrix.os }}
@@ -224,7 +218,7 @@ jobs:
         id: setup-go
         uses: actions/setup-go@v6
         with:
-          go-version: '~1.24.0'
+          go-version: '~1.25.8'
           check-latest: true
           cache: false
 
@@ -315,7 +309,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: '~1.25.7'
+          go-version: '~1.25.8'
 
       - name: Set global environment variables
         run: |