Update submodule to latest release-branch.go1.25 in microsoft/release-branch.go1.25

[bot-for-go]

Hi! I'm a bot, and this is an automatically generated upstream sync PR. 🔃

After submitting the PR, I will attempt to enable auto-merge in the "merge commit" configuration.

For more information, visit sync documentation in microsoft/go-infra.

Upstream commits included in this update

• f893f27028 [release-branch.go1.25] go1.25.13
• b0b8c97d13 [release-branch.go1.25] cmd/vendor: fix CVE-2026-56865 in x/mod
• 22e01669cd [release-branch.go1.25] cmd/vendor: fix CVE-2026-56864 in x/mod
• 8d01cbaad5 [release-branch.go1.25] encoding/asn1: enforce maximum recursion depth
• b952d04e2a [release-branch.go1.25] encoding/xml: fix depth processing in (*Decoder).unmarshal
• cafd3448c7 [release-branch.go1.25] html/template: fix JavaScript regexp tracking
• 962b300d32 [release-branch.go1.25] net/url: avoid quadratic complexity in resolvePath
• b60d45bfca [release-branch.go1.25] cmd/compile: do not elide riscv64 sign extension of unsigned values
• f59f3cc352 [release-branch.go1.25] cmd/compile: fix time traveling proofs in prove
• bff0502b40 [release-branch.go1.25] cmd/compile: use topo-sort in prove to correctly learn facts while walking once
• 271e96aab9 [release-branch.go1.25] cmd/compile: fix prove to generate Const64 for 64bits slicemasks
• 3f11ff881e [release-branch.go1.25] cmd/compile: fix mips64le bigger than 32bits pointer offsets
• d5dc7176e9 [release-branch.go1.25] runtime: fix frame pointer adjustment around injected calls
• 8c060995b6 [release-branch.go1.25] cmd/compile: do not home mul/div results in HI/LO
• 303e06b820 [release-branch.go1.25] crypto/tls: add fips140ems GODEBUG setting to disable EMS enforcement
• 83933547d8 [release-branch.go1.25] cmd/compile: tighten mergelocals address use analysis
• 5720c29c93 [release-branch.go1.25] cmd/compile: don't require Heapaddr for heap vars in dead code
• 677cfe54ec [release-branch.go1.25] crypto/tls: do not count handshake messages as state-advancing post-handshake
• ea16975e22 [release-branch.go1.25] runtime: fix uninitialized 7th argument in mach_vm_region_trampoline
• 081933dba2 [release-branch.go1.25] runtime: don't emit write barrier for code pointers in itabInit
• 08408a5df8 [release-branch.go1.25] os: strip trailing slashes in RemoveAll on Plan 9
• 3f94cdcdf1 [release-branch.go1.25] os: properly handle trailing / in Root.MkdirAll
• 4457b22124 [release-branch.go1.25] runtime: be sure to scan small frame introduced by (*sigctxt).pushCall
• 21cc406a8d [release-branch.go1.25] os: don't expect an error from Root.ReadFile from a directory on NetBSD
• 2d5129d2b3 [release-branch.go1.25] all: update x/net
• 784132491b [release-branch.go1.25] net/http: apply header timeout to server's unencrypted HTTP/2 check

View full diff on GitHub

[review-bot-for-go]

Thanks! Auto-approving.

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates the Go toolchain reference and advances the go subproject pointer to a newer commit.

Changes:

• Bumped declared Go version in VERSION.
• Updated the go subproject commit reference.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
go	Moves the subproject pointer to a newer commit.
VERSION	Updates the declared Go toolchain version.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
There may be pipelines that require an authorized user to comment /azp run to run.