Bump Go to 1.25.10 to address several CVEs

[francescoinfante]

From Grype:

NAME                     INSTALLED       FIXED IN                 TYPE       VULNERABILITY        SEVERITY  EPSS           RISK
stdlib                   go1.25.9        *1.25.10, 1.26.3         go-module  CVE-2026-39820       High      < 0.1% (17th)  < 0.1
stdlib                   go1.25.9        *1.25.10, 1.26.3         go-module  CVE-2026-42499       High      < 0.1% (6th)   < 0.1
stdlib                   go1.25.9        *1.25.10, 1.26.3         go-module  CVE-2026-39836       High      < 0.1% (5th)   < 0.1
stdlib                   go1.25.9        *1.25.10, 1.26.3         go-module  CVE-2026-33814       High      < 0.1% (5th)   < 0.1
stdlib                   go1.25.9        *1.25.10, 1.26.3         go-module  CVE-2026-33811       High      < 0.1% (4th)   < 0.1
stdlib                   go1.25.9        *1.25.10, 1.26.3         go-module  CVE-2026-42501       High      < 0.1% (0th)   < 0.1

[Copilot]

Pull request overview

This PR updates the repository’s Go version pin to address reported stdlib CVEs by moving to a patched Go release.

Changes:

• Bump the pinned Go version in .go-version from 1.25.9 to 1.25.10.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[francescoinfante]

/remove

[gh-worker-devflow-routing-ef8351]

View all feedbacks in Devflow UI.

2026-06-03 13:35:45 UTC ℹ️ Start processing command /remove

---

2026-06-03 13:35:51 UTC ℹ️ Devflow: /remove