Skip to content

Conversation

@developerkunal
Copy link
Contributor

📝 Checklist

  • All new/changed/fixed functionality is covered by tests (or N/A)
  • I have added documentation for all new/changed functionality (or N/A)

🔧 Changes

This PR upgrades the Go toolchain from 1.24.8 to 1.24.9 to resolve the remaining vulnerability in the Go standard library.

Toolchain Update:

  • Updated toolchain directive from go1.24.8 to go1.24.9
  • Resolves vulnerability GO-2025-4007 (quadratic complexity when checking name constraints in crypto/x509)

📚 References

🔬 Testing

  • Verified go.mod syntax is valid
  • Updated go.sum with latest checksums

@developerkunal developerkunal requested a review from a team as a code owner November 20, 2025 08:54
- Updated toolchain from go1.24.8 to go1.24.9
- Resolves GO-2025-4007 (quadratic complexity in crypto/x509 name constraints)
- Kept testify at v1.10.0 (v1.11.1 has test compatibility issues)
- Updated go.sum with latest dependency checksums
- No breaking changes - users will automatically use secure toolchain
@developerkunal developerkunal force-pushed the chore/upgrade-go-toolchain-1.24.9 branch from e402311 to f4793cd Compare November 20, 2025 08:59
@codecov-commenter
Copy link

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.13%. Comparing base (319d80e) to head (f4793cd).

Additional details and impacted files
@@           Coverage Diff           @@
##           master     #349   +/-   ##
=======================================
  Coverage   97.13%   97.13%           
=======================================
  Files           9        9           
  Lines         314      314           
=======================================
  Hits          305      305           
  Misses          6        6           
  Partials        3        3           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@developerkunal developerkunal enabled auto-merge (squash) November 20, 2025 10:21
@developerkunal developerkunal merged commit e47477b into master Nov 20, 2025
7 checks passed
@developerkunal developerkunal deleted the chore/upgrade-go-toolchain-1.24.9 branch November 20, 2025 10:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants