Skip to content

(security) golang: bump Go version to 1.25.10-1#17092

Merged
Kanishk-Bansal merged 1 commit into3.0-devfrom
user/app/bot-for-go/go-1.25.10-1
May 8, 2026
Merged

(security) golang: bump Go version to 1.25.10-1#17092
Kanishk-Bansal merged 1 commit into3.0-devfrom
user/app/bot-for-go/go-1.25.10-1

Conversation

@bot-for-go
Copy link
Copy Markdown
Contributor

@bot-for-go bot-for-go Bot commented May 8, 2026 •
edited
Loading

Hi! 👋 I'm the Microsoft team's bot. This is an automated pull request I generated to bump the Go version to 1.25.10-1.

This update contains security fixes.

I'm not able to run the Azure Linux pipelines yet, so the Microsoft release runner will need to finalize this PR. @dagood

Finalization steps:

  • Trigger Source Tarball Publishing with:
    Full Name: 
    go1.25.10-20260507.2.src.tar.gz
    URL: 
    https://github.com/microsoft/go/releases/download/v1.25.10-1/go1.25.10-20260507.2.src.tar.gz
  • Trigger the Buddy Build with:
    First field: 
    PR-17092
    Core spec: 
    golang-1.25
  • Post a PR comment with the URL of the triggered Buddy Build.
  • Mark this draft PR as ready for review.

Thanks!

@bot-for-go bot-for-go Bot added 3.0-dev PRs Destined for AzureLinux 3.0 Automatic PR labels May 8, 2026
@dagood
Copy link
Copy Markdown
Member

dagood commented May 8, 2026

Buddy build queued: https://dev.azure.com/mariner-org/36d030d6-1d99-4ebd-878b-09af1f4f722f/_build/results?buildId=1112903

@dagood dagood marked this pull request as ready for review May 8, 2026 16:14
@dagood dagood requested a review from a team as a code owner May 8, 2026 16:14
@Kanishk-Bansal Kanishk-Bansal added security CVE-fixed-by-upgrade CVE fixed by package upgrade labels May 8, 2026
@Kanishk-Bansal
Copy link
Copy Markdown
Contributor

Kanishk-Bansal commented May 8, 2026

11 CVE fixes are also covered in this release https://groups.google.com/g/golang-announce/c/qcCIEXso47M

Kanishk-Bansal
Kanishk-Bansal approved these changes May 8, 2026
View reviewed changes
Copy link
Copy Markdown
Contributor

@Kanishk-Bansal Kanishk-Bansal left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Regular micro version up for golang, this release has fix for 11 CVEs, Buddy Build looks fine. SPEC changes LGTM

  • Buddy Build 
  • signature has been modified and uploaded in blob
  • cgmanifest has been updated
  • PR has security tag

@Kanishk-Bansal Kanishk-Bansal added the ready-for-stable-review PR has passed initial review and is now ready for a second-level stable maintainer review label May 8, 2026
@Kanishk-Bansal Kanishk-Bansal merged commit 93be1ba into 3.0-dev May 8, 2026
28 of 31 checks passed
@Kanishk-Bansal Kanishk-Bansal deleted the user/app/bot-for-go/go-1.25.10-1 branch May 8, 2026 19:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@jslobodzian jslobodzian jslobodzian approved these changes

@Kanishk-Bansal Kanishk-Bansal Kanishk-Bansal approved these changes

Assignees

No one assigned

Labels

3.0-dev PRs Destined for AzureLinux 3.0 Automatic PR CVE-fixed-by-upgrade CVE fixed by package upgrade Packaging ready-for-stable-review PR has passed initial review and is now ready for a second-level stable maintainer review security

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@dagood @Kanishk-Bansal @jslobodzian