From 9feadf83ddf619ee99180d72bb71b73a56463ead Mon Sep 17 00:00:00 2001 From: Alper Rifat Ulucinar Date: Fri, 17 Apr 2026 04:42:08 +0000 Subject: [PATCH] fix(security): remediate CVE vulnerabilities - Update Go version to 1.25.9 (fixes CVE-2026-27140, CVE-2026-32283, CVE-2026-32280, CVE-2026-32281, CVE-2026-32289, CVE-2026-32282, CVE-2026-32288) Signed-off-by: Alper Rifat Ulucinar --- .github/workflows/ci.yml | 2 +- go.mod | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0378112..eedd1af 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,7 +14,7 @@ on: env: # Common versions - GO_VERSION: '1.25.8' + GO_VERSION: '1.25.9' GOLANGCI_VERSION: 'v2.4.0' DOCKER_BUILDX_VERSION: 'v0.23.0' diff --git a/go.mod b/go.mod index 56b355e..2ec3f45 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/crossplane-contrib/function-patch-and-transform -go 1.25.8 +go 1.25.9 require ( github.com/alecthomas/kong v1.13.0