Nick Craig-Wood f0b210a886 build: fix multiple CVEs by upgrading to go1.26.6 ...

- CVE-2026-56860: net/url: quadratic complexity in resolvePath
- CVE-2026-56858: html/template: JavaScript regexp context tracking
- CVE-2026-56862: crypto/tls: limit handshake messages accepted post-handshake
- CVE-2026-56853: net/http: apply ReadHeaderTimeout to unencrypted HTTP/2 check
- CVE-2026-56859: encoding/xml: recursion depth guard during decode
- CVE-2026-33818: encoding/asn1: enforce maximum recursion depth
- CVE-2026-46600: net: panic parsing an invalid SVCB or HTTPS RR in dnsmessage
- CVE-2026-39821: net/http: reject ASCII-only Punycode-encoded labels in idna

This also updates the go1.25 test job to go1.25.13 which contains the
same fixes.

2026-08-14 19:18:26 +01:00

..

build_publish_docker_image.yml

build(deps): bump actions/cache from 5 to 6

2026-07-29 17:23:50 +01:00

build_publish_docker_plugin.yml

build(deps): bump actions/checkout from 6 to 7

2026-07-29 17:23:22 +01:00

build.yml

build: fix multiple CVEs by upgrading to go1.26.6

2026-08-14 19:18:26 +01:00

notify.yml

build: add explicit permissions to GitHub Actions workflows

2026-04-09 14:37:30 +01:00

winget.yml

build: add explicit permissions to GitHub Actions workflows

2026-04-09 14:37:30 +01:00