security: upgrade go version to 1.25.9 to fix CVE-2026-27143#4474
Merged
liamfallon merged 2 commits intokptdev:mainfrom Apr 28, 2026
Merged
security: upgrade go version to 1.25.9 to fix CVE-2026-27143#4474liamfallon merged 2 commits intokptdev:mainfrom
liamfallon merged 2 commits intokptdev:mainfrom
Conversation
dosubot
Bot
added
the
size:XS
✅ Deploy Preview for kptdocs ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
dosubot
Bot
added
dependencies
Signed-off-by: Minna Howell <minnah@google.com>
Contributor
There was a problem hiding this comment.
Pull request overview
This PR upgrades the Go toolchain version from 1.25.7 to 1.25.9 to address multiple security vulnerabilities. The upgrade includes updating the Go version across the Makefile and all relevant go.mod files in the repository.
Changes:
- Updated GOLANG_VERSION in Makefile from 1.25.7 to 1.25.9
- Updated go version directive in main go.mod file from 1.25.7 to 1.25.9
- Updated go version directive in healthcheck/go.mod from 1.25.7 to 1.25.9
- Updated go version directive in documentation/go.mod from 1.25.7 to 1.25.9
Reviewed changes
Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
| Makefile | Updated GOLANG_VERSION variable and GORELEASER_IMAGE reference to use Go 1.25.9 |
| go.mod | Updated go version directive to 1.25.9 in main module |
| healthcheck/go.mod | Updated go version directive to 1.25.9 in healthcheck module |
| documentation/go.mod | Updated go version directive to 1.25.9 in documentation module |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
mozesl-nokia
approved these changes
Apr 13, 2026
efiacor
reviewed
Apr 13, 2026
Contributor
|
@menahyouyeah we would like to merge the PR. Please address the comments. Thanks. |
efiacor
approved these changes
Apr 28, 2026
aravindtga
approved these changes
Apr 28, 2026
liamfallon
approved these changes
Apr 28, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Description
This PR upgrades the Go toolchain and base images to version 1.25.9 to fix CVE-2026-32289, CVE-2026-27144, CVE-2026-32281, CVE-2026-32288, CVE-2026-32283, CVE-2026-32282, CVE-2026-27140, CVE-2026-27143, CVE-2026-32280