From 2e45b3f0b1e068ffa846bc38ac425e4046b1d56c Mon Sep 17 00:00:00 2001 From: Alper Rifat Ulucinar Date: Thu, 5 Feb 2026 21:29:55 +0300 Subject: [PATCH 1/2] fix(security): remediate CVE vulnerabilities - Update Go version to 1.24.12 (fixes CVE-2025-61726, CVE-2025-61731, CVE-2025-61728, CVE-2025-61730) Signed-off-by: Alper Rifat Ulucinar --- go.mod | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) diff --git a/go.mod b/go.mod index f67158d..69733af 100644 --- a/go.mod +++ b/go.mod @@ -1,8 +1,6 @@ module github.com/upbound/function-openai -go 1.24.0 - -toolchain go1.24.11 +go 1.24.12 require ( github.com/alecthomas/kong v1.4.0 From 422846c6cdac648eed36291842e1c06e5bbddfc6 Mon Sep 17 00:00:00 2001 From: Alper Rifat Ulucinar Date: Thu, 5 Feb 2026 21:35:49 +0300 Subject: [PATCH 2/2] fix(ci): resolve build failures - Update GO_VERSION from 1.24.4 to 1.24.12 to match go.mod requirement Signed-off-by: Alper Rifat Ulucinar --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c85e741..0c47f7b 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,7 +14,7 @@ on: env: # Common versions - GO_VERSION: '1.24.4' + GO_VERSION: '1.24.12' GOLANGCI_VERSION: 'v1.64.2' DOCKER_BUILDX_VERSION: 'v0.24.0'