Nick Craig-Wood 06c054bbc8 Update to go 1.25.9 to fix multiple CVEs ...

- CVE-2026-32282: os: Root.Chmod can follow symlinks out of the root on Linux
- CVE-2026-32289: html/template: JS template literal context incorrectly tracked
- CVE-2026-33810: crypto/x509: excluded DNS constraints not properly applied to wildcard domains
- CVE-2026-27144: cmd/compile: no-op interface conversion bypasses overlap checking
- CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination
- CVE-2026-32288: archive/tar: unbounded allocation when parsing old format GNU sparse map
- CVE-2026-32283: crypto/tls: multiple key update handshake messages can cause connection to deadlock
- CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG
- CVE-2026-32280: crypto/x509: unexpected work during chain building
- CVE-2026-32281: crypto/x509: inefficient policy validation

Fixes #9302

2026-04-08 09:54:10 +01:00

..

build_publish_docker_image.yml

build: bump actions/download-artifact from 6 to 7

2025-12-13 11:01:27 +01:00

build_publish_docker_plugin.yml

build: bump actions/checkout from 5 to 6

2025-11-20 23:16:24 +00:00

build.yml

Update to go 1.25.9 to fix multiple CVEs

2026-04-08 09:54:10 +01:00

notify.yml

build: update issue label notification machinery

2024-05-15 15:07:45 +01:00

winget.yml

Convert source files with crlf to lf

2024-04-18 11:32:45 +02:00