Nick Craig-Wood 869f777594 build: fix multiple CVEs by upgrading to go1.26.3 ...

- CVE-2026-42501: cmd/go: malicious module proxy can bypass checksum database
- CVE-2026-39825: net/http/httputil: ReverseProxy forwards queries with more than urlmaxqueryparams parameters
- CVE-2026-39836: net: panic in Dial and LookupPort when handling NUL byte on Windows
- CVE-2026-42499: net/mail: quadratic string concatenation in consumePhrase
- CVE-2026-39820: net/mail: quadratic string concatentation in consumeComment
- CVE-2026-39819: cmd/go: "go bug" follows symlinks in predictable temporary filenames
- CVE-2026-39817: cmd/go: "go tool pack" does not sanitize output paths
- CVE-2026-33814: net/http: infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE
- CVE-2026-39826: html/template: escaper bypass leads to XSS
- CVE-2026-33811: net: crash when handling long CNAME response
- CVE-2026-39823: html/template: bypass of meta content URL escaping causes XSS

2026-05-08 10:47:04 +01:00

..

ISSUE_TEMPLATE

docs: improve grammar and fix typos (#5361)

2021-11-04 12:50:43 +01:00

workflows

build: fix multiple CVEs by upgrading to go1.26.3

2026-05-08 10:47:04 +01:00

dependabot.yml

build: remove Go updates from dependabot as it is too noisy

2023-04-20 17:58:10 +01:00

ISSUE_TEMPLATE.md

build: fix up package paths after repo move

2019-07-28 18:47:38 +01:00

PULL_REQUEST_TEMPLATE.md

.github: correct contribution link in pull request template

2021-10-14 11:07:25 +01:00