Summary

This release includes critical security vulnerability remediations and dependency updates.

Security Fixes

This release addresses 6 high and medium severity CVE vulnerabilities:

google.golang.org/grpc (v1.82.1 → v1.83.2)

• GHSA-vp52-pcj8-j9qc (High): Security vulnerability in gRPC
• GHSA-qc2q-p7wx-3px3 (Medium): Security vulnerability in gRPC
• GHSA-2v4p-qf9q-27wj (High): Security vulnerability in gRPC

golang.org/x/crypto (v0.53.0 → v0.56.0)

• GO-2026-6355 (High): Cryptographic vulnerability
• GO-2026-6354 (High): Cryptographic vulnerability
• GO-2026-6303 (High): Cryptographic vulnerability

Toolchain Updates

• Updated Go version from 1.25.13 to 1.26.6 to support required dependency versions and fix stdlib CVEs
• Updated CI workflow to use Go 1.26.6

Summary

This release includes security fixes and dependency updates for the Go runtime.

Highlights

• Security: Updated Go to version 1.25.13 to address multiple CVE vulnerabilities
  • GO-2026-5026
  • GO-2026-5972
  • GO-2026-6088
  • GO-2026-6089
  • GO-2026-6090
  • GO-2026-6218
  • GO-2026-6091
• Updated CI workflow to use Go 1.25.13

This release focuses on maintaining security and stability with no breaking changes.

Summary

This release includes critical security fixes and dependency updates to address multiple CVE vulnerabilities.

Security Fixes

• Go Runtime Update: Updated to Go 1.25.12 to address:

  • GO-2026-5856
  • GO-2026-4970

• Dependency Security Updates:

  • Updated google.golang.org/grpc to v1.82.1 (fixes GHSA-hrxh-6v49-42gf)
  • Updated golang.org/x/text to v0.39.0 (fixes GO-2026-5970)
  • Updated golang.org/x/net to v0.56.0 (fixes GO-2026-5942)

Infrastructure

• Updated CI workflow to use Go 1.25.12

Summary

This release includes security fixes and dependency updates.

Highlights

• Security vulnerability remediation for Go runtime and dependencies
• Updated Go version to 1.25.11 (addresses CVE-2026-42504, CVE-2026-42507, CVE-2026-27145, and related vulnerabilities)
• Updated golang.org/x/crypto to v0.52.0
• Updated golang.org/x/net to v0.55.0
• Updated golang.org/x/sys to v0.45.0
• Updated CI workflow Go version to 1.25.11

Summary

This release includes security fixes for Go standard library vulnerabilities.

Highlights

• Security: Updated Go version to 1.25.10 to remediate 11 CVE vulnerabilities (6 High, 5 Medium severity)
• Fixed CVEs: CVE-2026-39820, CVE-2026-42499, CVE-2026-39836, CVE-2026-33814, CVE-2026-33811, CVE-2026-42501, CVE-2026-39817, CVE-2026-39826, CVE-2026-39825, CVE-2026-39823, CVE-2026-39819
• Updated CI workflow to use Go 1.25.10

Summary

This release includes critical security fixes for Go runtime vulnerabilities.

Highlights

• Security vulnerability remediation for Go runtime
• Updated Go version to 1.25.9 to address multiple CVEs:
  • CVE-2026-27140
  • CVE-2026-32283
  • CVE-2026-32280
  • CVE-2026-32281
  • CVE-2026-32289
  • CVE-2026-32282
  • CVE-2026-32288

Summary

This release includes critical security fixes and dependency updates.

Highlights

• Security vulnerability remediation for Go runtime and dependencies:
  • Updated Go version to 1.25.8 (fixes CVE-2026-25679, CVE-2026-27142, CVE-2026-27139)
  • Updated google.golang.org/grpc to v1.79.3 (fixes GHSA-p77j-4mvh-x3m3)
  • Updated github.com/buger/jsonparser to v1.1.2 (fixes GHSA-6g7g-w4f8-9c9x)
• CI/CD improvements:
  • Migrated .golangci.yml to v2 syntax for golangci-lint compatibility
  • Updated golangci-lint to v2.11.4 for Go 1.25.8 support
  • Upgraded golangci-lint-action to v7

Summary

This release includes security fixes and dependency updates.

Highlights

• Security vulnerability remediation for Go runtime
• Updated Go version to 1.24.13 (fixes CVE-2025-68121, CVE-2025-61732)
• Updated CI workflow to use Go 1.24.13

Summary

This release includes security fixes and dependency updates.

Highlights

• Security vulnerability remediation addressing multiple CVEs in Go runtime
• Updated Go version to 1.24.12 to fix CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, and CVE-2025-61731

Summary

This release includes security fixes and dependency updates.

Highlights

• Updated Go toolchain to 1.24.11 to address multiple CVEs (CVE-2025-61723, CVE-2025-61725, CVE-2025-61729, CVE-2025-58187, CVE-2025-58188, CVE-2025-58185, CVE-2025-47912, CVE-2025-58186, CVE-2025-61724, CVE-2025-58189, CVE-2025-58183, CVE-2025-61727)
• Updated golang.org/x/crypto to v0.45.0 to address GHSA-j5w8-q4qc-rx2x and GHSA-f6x5-jh6r-wrfv