Security and maintenance
No functional changes. The binaries are rebuilt with Go 1.25.11, which patches three Go standard library advisories: GO-2026-5037 (crypto/x509), GO-2026-5038 (mime), and GO-2026-5039 (net/textproto).
hop never calls the affected code, so earlier binaries were not exploitable (govulncheck reports zero reachable vulnerabilities). This rebuild simply keeps the shipped toolchain current. Builds and the weekly vulnerability scan now track the latest 1.25.x patch automatically, so future stdlib fixes land without a manual bump.
Install
brew install philippe-desplats/tap/hop
# or
go install github.com/philippe-desplats/hop/cmd/hop@latestPrebuilt binaries for macOS and Linux (amd64 and arm64) are attached below, with signed checksums (cosign) and an SBOM per artifact.
Full changelog: v2.5.0...v2.5.1