Nick Craig-Wood 06c054bbc8 Update to go 1.25.9 to fix multiple CVEs ...

- CVE-2026-32282: os: Root.Chmod can follow symlinks out of the root on Linux
- CVE-2026-32289: html/template: JS template literal context incorrectly tracked
- CVE-2026-33810: crypto/x509: excluded DNS constraints not properly applied to wildcard domains
- CVE-2026-27144: cmd/compile: no-op interface conversion bypasses overlap checking
- CVE-2026-27143: cmd/compile: possible memory corruption after bound check elimination
- CVE-2026-32288: archive/tar: unbounded allocation when parsing old format GNU sparse map
- CVE-2026-32283: crypto/tls: multiple key update handshake messages can cause connection to deadlock
- CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG
- CVE-2026-32280: crypto/x509: unexpected work during chain building
- CVE-2026-32281: crypto/x509: inefficient policy validation

Fixes #9302

2026-04-08 09:54:10 +01:00

..

ISSUE_TEMPLATE

docs: improve grammar and fix typos (#5361)

2021-11-04 12:50:43 +01:00

workflows

Update to go 1.25.9 to fix multiple CVEs

2026-04-08 09:54:10 +01:00

dependabot.yml

build: remove Go updates from dependabot as it is too noisy

2023-04-20 17:58:10 +01:00

ISSUE_TEMPLATE.md

build: fix up package paths after repo move

2019-07-28 18:47:38 +01:00

PULL_REQUEST_TEMPLATE.md

.github: correct contribution link in pull request template

2021-10-14 11:07:25 +01:00