0
0
mirror of https://github.com/go-gitea/gitea.git synced 2026-02-07 05:54:18 +01:00

[SECURITY] fix: Adjust the toolchain version (#36537)

# Summary:

- Adjust the toolchain version to fix the security issues


```log
Vulnerability #1: GO-2026-4337
    Unexpected session resumption in crypto/tls
  More info: https://pkg.go.dev/vuln/GO-2026-4337
  Standard library
    Found in: crypto/tls@go1.25.6
    Fixed in: crypto/tls@go1.25.7
    Example traces found:
```

Signed-off-by: Pascal Zimmermann <pascal.zimmermann@theiotstudio.com>
This commit is contained in:
Pascal Zimmermann 2026-02-06 00:27:53 +01:00 committed by GitHub
parent fca94bcdd7
commit 50fdd2d49a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

2
go.mod
View File

@ -2,7 +2,7 @@ module code.gitea.io/gitea
go 1.25.0
toolchain go1.25.6
toolchain go1.25.7
// rfc5280 said: "The serial number is an integer assigned by the CA to each certificate."
// But some CAs use negative serial number, just relax the check. related: