From 011ee7e02a7879038c31a6d77f9a03c8a5f7d8da Mon Sep 17 00:00:00 2001 From: Divyanshu Agrawal Date: Sun, 16 Aug 2026 09:27:25 +0000 Subject: [PATCH] =?UTF-8?q?fix(security):=20bump=20Go=20stdlib=20go1.25.12?= =?UTF-8?q?=20=E2=86=92=20go1.25.13?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Addresses four stdlib vulnerabilities confirmed by govulncheck: - GO-2026-6218: Quadratic complexity in net/url.resolvePath - GO-2026-6090: Unbounded post-handshake messages in crypto/tls - GO-2026-5972: Max recursion depth in encoding/asn1 - GO-2026-5026: Punycode-encoded label rejection in net/http Related: SRVKP-13176 Co-Assisted-By: Claude Sonnet 4.6 --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index c83177039..e7ad051b6 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/tektoncd/cli -go 1.25.12 +go 1.25.13 require ( github.com/AlecAivazis/survey/v2 v2.3.7