Merge pull request #5 from nexthink-oss/feature/TENL-491-harden-http-provider

afomin25 · web-flow · commit 66bb607f0a65 · 2025-10-31T14:17:13.000+01:00
chore(TENL-491): Harden http provider for security compliance
diff --git a/.changes/3.5.3.md b/.changes/3.5.3.md
@@ -0,0 +1,5 @@
+## 3.5.3 (October 30, 2025)
+
+NOTES:
+
+* all: Updated Go version from 1.24.6 to 1.25.3 to address multiple HIGH severity CVEs in Go stdlib: CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725
diff --git a/.changes/unreleased/.gitkeep b/.changes/unreleased/.gitkeep
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,3 +1,10 @@
+## 3.5.3 (October 30, 2025)
+
+NOTES:
+
+* all: Updated Go version from 1.24.6 to 1.25.3 to address multiple HIGH severity CVEs in Go stdlib: CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725
+
+
 ## 3.5.0 (April 23, 2025)
 
 FEATURES:
diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/nexthink-oss/terraform-provider-http
 
-go 1.24.6
+go 1.25.3
 
 require (
 	github.com/google/uuid v1.6.0
diff --git a/version/VERSION b/version/VERSION
@@ -1 +1 @@
-3.5.2
+3.5.3

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +## 3.5.3 (October 30, 2025)
++
 +NOTES:
++
 +* all: Updated Go version from 1.24.6 to 1.25.3 to address multiple HIGH severity CVEs in Go stdlib: CVE-2025-47912, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725