From 242215d831b16fa5158f70d4ebf830026bf62bac Mon Sep 17 00:00:00 2001 From: Steven Hedrick Date: Tue, 3 Feb 2026 15:27:10 -0500 Subject: [PATCH] Updating go std lib to fix CVE-2025-61726 --- .github/workflows/relativity-ci.yml | 2 +- .github/workflows/release.yaml | 2 +- Dockerfile | 2 +- go.mod | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/relativity-ci.yml b/.github/workflows/relativity-ci.yml index ea6d6ba..ae0ed92 100644 --- a/.github/workflows/relativity-ci.yml +++ b/.github/workflows/relativity-ci.yml @@ -28,7 +28,7 @@ jobs: - name: Set up Go uses: actions/setup-go@v4 with: - go-version: '1.25.5' + go-version: '1.25.6' - name: Azure Login uses: Azure/login@v2 diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 81ac31d..f87b7ad 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -17,7 +17,7 @@ jobs: - name: Set up Go uses: actions/setup-go@v4 with: - go-version: '1.25.5' + go-version: '1.25.6' # On tag, get tag version without v (e.g. v1.0.0 -> 1.0.0, v1.1.1-beta -> 1.1.1-beta) - name: Get tag version id: get_version diff --git a/Dockerfile b/Dockerfile index 97fe756..8a50e7a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.25.5-bookworm AS dev +FROM golang:1.25.6-bookworm AS dev FROM dev AS build ARG VERSION="local" diff --git a/go.mod b/go.mod index c8c3c8a..a347341 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/redboxllc/scuttle -go 1.25.5 +go 1.25.6 require ( github.com/cenk/backoff v2.1.1+incompatible