From da2a21e010da1bc0c557cde9cff2e33455d502d2 Mon Sep 17 00:00:00 2001 From: Divyanshu Agrawal Date: Sun, 16 Aug 2026 09:27:38 +0000 Subject: [PATCH] =?UTF-8?q?fix(security):=20bump=20Go=20stdlib=20go1.25.12?= =?UTF-8?q?=20=E2=86=92=20go1.25.13?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Addresses four stdlib vulnerabilities confirmed by govulncheck: - GO-2026-6218: Quadratic complexity in net/url.resolvePath - GO-2026-6090: Unbounded post-handshake messages in crypto/tls - GO-2026-5972: Max recursion depth in encoding/asn1 - GO-2026-5026: Punycode-encoded label rejection in net/http Related: SRVKP-13176 Co-Assisted-By: Claude Sonnet 4.6 --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 6bce7713f..81effaaf4 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/tektoncd/cli -go 1.25.12 +go 1.25.13 require ( github.com/AlecAivazis/survey/v2 v2.3.7