Bump Go to 1.26.1 / 1.25.8 #21458
Description
What would you like to be added?
Go 1.26.1 and 1.25.8 were released yesterday; they include fixes for CVEs: CVE-2026-27137, CVE-2026-27138, CVE-2026-27142, CVE-2026-25679 and CVE-2026-27139. According to our Dependency management documentation, we want to stay on the latest patch version. This means updating our stable branches to 1.25.8 and main to 1.26.1.
Progress track:
- etcd
-
main: go v1.26.1 - Bump Go to 1.26.1 #21459 -
release-3.6: go v1.25.8 - [release-3.6] Bump Go to 1.25.8 #21463 -
release-3.5: go v1.25.8 - [release-3.5] Bump Go to 1.25.8 #21462 -
release-3.4: go v1.25.8 - [release-3.4] Bump Go to 1.25.8 #21461 -
CHANGELOG
-
- bbolt
-
main: go v1.25.8 -
release-1.4: v1.25.8 -
release-1.3: v1.25.8
-
- raft
-
main: go v1.25.8 -
release-3.6: go v1.25.8
-
-
etcd-io/gofailmaster: go v1.25.8 -
etcd-io/augermain: go v1.26.1 -
etcd-io/etcd-operator: go v1.26.1 -
etcd-io/protodoc: go v1.25.8
Please review the previous issues and their corresponding pull requests, such as #21364 and #21254.
Why is this needed?
To keep the project up to date with the latest Go versions. And address CVE-2026-27137, CVE-2026-27138, CVE-2026-27142, CVE-2026-25679 and CVE-2026-27139.