Summary
Patch release with dependency security updates since 9.4.0. Bumps the Go module and CI to 1.25.14, the Docker builder image to golang:1.26.8, and the default version to 9.4.1.
Security
golang.org/x/crypto0.21.0 → 0.55.0golang.org/x/net0.23.0 → 0.58.0golang.org/x/text0.14.0 → 0.41.0golang.org/x/sys0.18.0 → 0.47.0go.mongodb.org/mongo-driver1.12.0 → 1.17.7github.com/buger/jsonparser1.1.1 → 1.1.2google.golang.org/grpc1.54.0 → 1.83.2google.golang.org/protobuf1.30.0 → 1.36.11github.com/golang/glog1.0.0 → 1.2.5
Build & release
- Go module updated from 1.16 → 1.25.14 (
go.mod). CI test workflow updated from 1.19 → 1.25.14. - Docker builder image updated from golang:1.26.4 → golang:1.26.8. Runtime image stays debian:trixie-slim.
- Default version bumped from 9.4.0 → 9.4.1 (
Makefile,Dockerfile). - Binary / AMI publish no longer runs on release. Official releases are distributed via Docker. One-off binaries stay on manual
workflow_dispatch.
Fixes
- Non-constant
fmt.Errorfarguments updated so the tree builds cleanly on Go 1.25. - Rules script test calls a local HTTP server instead of the external demo cluster.
Upgrade notes
- Pull the 9.4.1 image, or rebuild from this tag. No configuration changes.
- Building from source requires Go 1.25.14 or higher (see README).