Skip to content

Commit 5cc553d

Browse files
tadasantclaude
andauthored
Upgrade Go to 1.24.11 to fix GO-2025-4155 vulnerability (#815)
Prepared by Claude Code, reviewd by me. ## Summary - Upgrade Go from 1.24.9 to 1.24.11 in the main `go.mod` to fix govulncheck CI failure - Upgrade Go from 1.24.7 to 1.24.11 in `deploy/go.mod` for the same vulnerability fix ## Details This PR addresses the failing `govulncheck` check in CI caused by vulnerability **GO-2025-4155**: - **Vulnerability**: Excessive resource consumption when printing error string for host certificate validation in `crypto/x509` - **Found in**: `crypto/[email protected]` (and earlier versions like go1.24.7) - **Fixed in**: `crypto/[email protected]` - **More info**: https://pkg.go.dev/vuln/GO-2025-4155 Both Go module files in the repository are updated to 1.24.11 to ensure consistent vulnerability remediation. ## Test plan - [x] CI passes govulncheck after the Go version upgrade 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude <[email protected]>
1 parent 51c70ba commit 5cc553d

File tree

2 files changed

+2
-2
lines changed

2 files changed

+2
-2
lines changed

deploy/go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module github.com/modelcontextprotocol/registry/deploy/infra
22

3-
go 1.24.7
3+
go 1.24.11
44

55
require (
66
github.com/pulumi/pulumi-gcp/sdk/v8 v8.41.1

go.mod

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module github.com/modelcontextprotocol/registry
22

3-
go 1.24.9
3+
go 1.24.11
44

55
require (
66
cloud.google.com/go/kms v1.23.2

0 commit comments

Comments
 (0)