Repository navigation
Bump Go to 1.25.14 on release/v1.30.x (security patch) - #12059
Merged
Merged
Conversation
Picks up the Go standard library security fix released in go1.25.13, and takes the final patch on the 1.25 line rather than 1.25.13 itself. Note that Go 1.25 went end of life when Go 1.27.0 shipped on 2026-08-19, and go1.25.14 was its last release, so this branch will need to move to a supported line (1.26.x) for any future upstream security fix. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Contributor
Author
|
Supersedes #12056, which proposed moving this branch to Go 1.26.8 instead; that one was closed in favour of the minimal same-line patch bump. |
simvlad
marked this pull request as ready for review
September 14, 2026 17:22
yycptt
approved these changes
Sep 14, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What changed?
Bumped the
godirective ingo.modfrom1.25.11to1.25.14onrelease/v1.30.x. This is the only Go version pin on the branchWhy?
Moving to 1.26.8 puts
release/v1.30.xon a supported line and aligns it withrelease/v1.32.x, which is already on 1.26.8.How did you test it?
GOTOOLCHAIN=go1.25.14 go build ./...completes cleanPotential risks
Toolchain-only change
🤖 Generated with Claude Code