Security: packer binary compiled with vulnerable Go version and grpc dependency

[flaf]

The latest packer binary (installed via apt.releases.hashicorp.com) contains
two Critical CVEs identified by Trivy:

CVE	Severity	Component	Installed	Fixed in
CVE-2025-68121	Critical	stdlib (Go)	1.24.12	1.24.13, 1.25.7, 1.26.0-rc.3
CVE-2026-33186	Critical	google.golang.org/grpc	v1.59.0	1.79.3

Could you please:

• recompile packer with Go ≥ 1.24.13 or ≥ 1.25.7
• bump google.golang.org/grpc to ≥ 1.79.3

[tanmay-hc]

Both these issues have been resolved now and we will be making a release soon. Closing this issue

[flaf]

Thanks @tanmay-hc . 👍

[github-actions]

I'm going to lock this issue because it has been closed for 30 days ⏳. This helps our maintainers find and focus on the active issues.
If you have found a problem that seems similar to this, please open a new issue and complete the issue template so we can capture all the details necessary to investigate further.