Need go 1.25.9+ and go.opentelemetry.io 1.43.0+ to address high-sev CVEs

[darrentma]

When possible, please update to "go 1.25.9" or higher and "go.opentelemetry.io 1.43.0" of higher. Thanks!

There are several high-sev CVEs that would be addressed with these version bumps:

• CVE-2026-32281
• CVE-2026-39883
• CVE-2026-27142
• CVE-2026-32289
• CVE-2026-25679
• CVE-2026-32280
• CVE-2026-32282
• CVE-2026-32283
• CVE-2026-32288

[DavidGobran]

We are also getting CVE-2026-32281 and CVE-2026-39883 and require go 1.25.9+ and go.opentelemetry.io 1.43.0. Thanks in advance!

[darrentma]

@acornett21 For planning purposes, can you give a rough ETA on when update go 1.25.9+ (or 1.26.2+) and go.opentelemetry.io 1.43.0+ might be available? Thanks!

[Preethi-Ps]

We are also getting CVE-2026-29181 and require the corresponding fix. Thanks in advance!

[ravipareek1976]

Gentle Reminder !! For Fix CVE-2026-32281

[ravipareek1976]

Gentle Reminder ! Fix FOr CVE-2026-39883

@DavidGobran FYI

[darrentma]

Still waiting for PR #213 to be merged.