Skip to content

Commit f6df7b3

Browse files
authored
fix: Upgrade Go to 1.25.6 to address security vulnerabilities (#718)
Addresses two critical security vulnerabilities found in Go 1.25.5: - GO-2026-4341: Memory exhaustion in query parameter parsing (net/url) - GO-2026-4340: TLS handshake messages processed at incorrect encryption level (crypto/tls) Both vulnerabilities are fixed in Go 1.25.6. Updated all GitHub Actions workflows to use Go 1.25.6. Co-authored-by: Ben Coombs <bjcoombs@users.noreply.github.com>
1 parent bcb8fe7 commit f6df7b3

8 files changed

Lines changed: 12 additions & 12 deletions

File tree

.github/workflows/benchmarks.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@ jobs:
2727
- name: Set up Go
2828
uses: actions/setup-go@v6
2929
with:
30-
go-version: '1.25.5'
30+
go-version: '1.25.6'
3131
cache: true
3232

3333
- name: Set up buf

.github/workflows/build.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -31,7 +31,7 @@ jobs:
3131
- name: Set up Go
3232
uses: actions/setup-go@v6
3333
with:
34-
go-version: '1.25.5'
34+
go-version: '1.25.6'
3535
cache: true
3636

3737
- name: Set up buf

.github/workflows/codeql.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -64,7 +64,7 @@ jobs:
6464
if: matrix.language == 'go'
6565
uses: actions/setup-go@v6
6666
with:
67-
go-version: '1.25.5'
67+
go-version: '1.25.6'
6868
cache: true
6969

7070
# Set up buf for protobuf generation (pinned version for reproducibility)

.github/workflows/migrations.yml

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -35,7 +35,7 @@ jobs:
3535
- name: Set up Go
3636
uses: actions/setup-go@v6
3737
with:
38-
go-version: '1.25.5'
38+
go-version: '1.25.6'
3939
cache: true
4040

4141
- name: Install Atlas CLI
@@ -80,7 +80,7 @@ jobs:
8080
- name: Set up Go
8181
uses: actions/setup-go@v6
8282
with:
83-
go-version: '1.25.5'
83+
go-version: '1.25.6'
8484
cache: true
8585

8686
- name: Install Atlas CLI
@@ -241,7 +241,7 @@ jobs:
241241
- name: Set up Go
242242
uses: actions/setup-go@v6
243243
with:
244-
go-version: '1.25.5'
244+
go-version: '1.25.6'
245245
cache: true
246246

247247
- name: Install Atlas CLI

.github/workflows/nightly.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -28,7 +28,7 @@ jobs:
2828
- name: Set up Go
2929
uses: actions/setup-go@v6
3030
with:
31-
go-version: '1.25.5'
31+
go-version: '1.25.6'
3232
cache: true
3333

3434
- name: Set up buf
@@ -98,7 +98,7 @@ jobs:
9898
- name: Set up Go
9999
uses: actions/setup-go@v6
100100
with:
101-
go-version: '1.25.5'
101+
go-version: '1.25.6'
102102
cache: true
103103

104104
- name: Set up buf

.github/workflows/quality.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ jobs:
3838
- name: Set up Go
3939
uses: actions/setup-go@v6
4040
with:
41-
go-version: '1.25.5'
41+
go-version: '1.25.6'
4242
cache: true
4343

4444
- name: Set up buf

.github/workflows/security.yml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525
- name: Set up Go
2626
uses: actions/setup-go@v6
2727
with:
28-
go-version: '1.25.5'
28+
go-version: '1.25.6'
2929
cache: true
3030

3131
- name: Set up buf
@@ -51,7 +51,7 @@ jobs:
5151
- name: Set up Go
5252
uses: actions/setup-go@v6
5353
with:
54-
go-version: '1.25.5'
54+
go-version: '1.25.6'
5555
cache: true
5656

5757
- name: Set up buf

.github/workflows/test.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
- name: Set up Go
2323
uses: actions/setup-go@v6
2424
with:
25-
go-version: '1.25.5'
25+
go-version: '1.25.6'
2626
cache: true
2727

2828
- name: Set up buf

0 commit comments

Comments
 (0)