-
Notifications
You must be signed in to change notification settings - Fork 10.2k
Open
Description
What would you like to be added?
Go 1.25.2 and 1.24.8 were released today, which include fixes for CVE-2025-61725, CVE-2025-58187, CVE-2025-58189, CVE-2025-61723, CVE-2025-47912, CVE-2025-58185, CVE-2025-58186, CVE-2025-58188, CVE-2025-58183, and CVE-2025-61724. According to our Dependency management documentation, we want to stay on the latest patch version. This means updating our stable branches to 1.24.8 and main
to 1.25.2.
Progress track:
- etcd
-
main
: go v1.25.2 - dependency: Bump Go from 1.25.1 to 1.25.2 #20775 -
release-3.6
: go v1.24.8 - [release-3.6] Bump go to 1.24.8 #20776 -
release-3.5
: go v1.24.8 - [release-3.5] Bump go to 1.24.8 #20777 -
release-3.4
: go v1.24.8 - [release-3.4] bump go to 1.24.8 #20778 -
CHANGELOG
-
- bbolt
-
main
: go v1.24.8 - Bump go to 1.24.8 bbolt#1101 -
release-1.4
: v1.24.8 - [release-1.4] Bump go to 1.24.8 bbolt#1102 -
release-1.3
: v1.24.8 - [release-1.3] Bump go to 1.24.8 bbolt#1103
-
- raft
-
main
: go v1.24.8 - Bump go to 1.24.8 raft#336 -
release-3.6
: go v1.24.8 - [release-3.6] Bump go to 1.24.8 raft#337
-
-
etcd-io/gofail
master
: go v1.24.8 - Bump go to 1.24.8 gofail#127 -
etcd-io/auger
main
: go v1.25.2 - Bump go to 1.25.2 auger#383 -
etcd-io/etcd-operator
: go v1.25.2 - Bump go to 1.25.2 etcd-operator#221 -
etcd-io/protodoc
: go v1.24.8 - Bump go to 1.24.8 protodoc#25
Please review the previous issues and their corresponding pull requests, such as #20602 and #20126.
Why is this needed?
To keep up with Go versions and to address CVE-2025-61725, CVE-2025-58187, CVE-2025-58189, CVE-2025-61723, CVE-2025-47912, CVE-2025-58185, CVE-2025-58186, CVE-2025-58188, CVE-2025-58183, and CVE-2025-61724.