From 76406072f359fa3789818d9e5d12c9104bf85759 Mon Sep 17 00:00:00 2001 From: Alper Rifat Ulucinar Date: Mon, 2 Mar 2026 17:13:43 +0300 Subject: [PATCH 1/2] fix(security): remediate CVE vulnerabilities - Update Go version to 1.24.13 (fixes CVE-2025-68121, CVE-2025-61732) Signed-off-by: Alper Rifat Ulucinar --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 69733af..71056ae 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/upbound/function-openai -go 1.24.12 +go 1.24.13 require ( github.com/alecthomas/kong v1.4.0 From 81262e5b43b3d5600148f89e93042dc4b637cd75 Mon Sep 17 00:00:00 2001 From: Alper Rifat Ulucinar Date: Mon, 2 Mar 2026 17:19:27 +0300 Subject: [PATCH 2/2] fix(ci): update Go version to 1.24.13 Update CI workflow to use Go 1.24.13 to match go.mod requirement set during CVE remediation. Signed-off-by: Alper Rifat Ulucinar --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0c47f7b..015ad14 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,7 +14,7 @@ on: env: # Common versions - GO_VERSION: '1.24.12' + GO_VERSION: '1.24.13' GOLANGCI_VERSION: 'v1.64.2' DOCKER_BUILDX_VERSION: 'v0.24.0'