Skip to content

go.mod: bump go directive to 1.25.9 to fix stdlib CVEs - #252

Open
xq9mend wants to merge 1 commit into
sonic-net:202605from
xq9mend:backport/go125-cve-fix-202605
Open

xq9mend wants to merge 1 commit into
sonic-net:202605from
xq9mend:backport/go125-cve-fix-202605

Conversation

@xq9mend

@xq9mend xq9mend commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Why I did it

Bump go directive from 1.24.4 to 1.25.9 to pick up Go stdlib security fixes.

Backport of #246 to 202605.

How I did it

Updated the go directive in go.mod.

How to verify it

Build sonic-mgmt-common and confirm go directive is applied.

Bump go directive from 1.24.4 to 1.25.9 to pick up Go stdlib
security fixes.

Signed-off-by: xq9mend <xq9mend@users.noreply.github.com>
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
There may be pipelines that require an authorized user to comment /azp run to run.

@mssonicbld

Copy link
Copy Markdown

/azp run

@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants