From 1f285910db2845b25d1c0482ef1d7250db9db92f Mon Sep 17 00:00:00 2001 From: David Levy Date: Mon, 11 May 2026 14:37:49 -0500 Subject: [PATCH] deps: bump go to 1.25.10 to fix GO-2026-4971 and GO-2026-4918 --- .github/workflows/golangci-lint.yml | 2 +- .github/workflows/pr-validation.yml | 2 +- go.mod | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index 727377f5..5ec999cb 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -15,7 +15,7 @@ jobs: steps: - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 with: - go-version: '1.25.9' + go-version: '1.25.10' - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: golangci-lint # Pinned to commit SHA for supply chain security (CWE-829) diff --git a/.github/workflows/pr-validation.yml b/.github/workflows/pr-validation.yml index ca9f53e3..94465576 100644 --- a/.github/workflows/pr-validation.yml +++ b/.github/workflows/pr-validation.yml @@ -16,7 +16,7 @@ jobs: - name: Setup go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 with: - go-version: '1.25.9' + go-version: '1.25.10' - name: Run tests against Linux SQL run: | go version diff --git a/go.mod b/go.mod index 51dcfc0f..872066fd 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/microsoft/go-sqlcmd -go 1.25.9 +go 1.25.10 require ( github.com/alecthomas/chroma/v2 v2.24.1