]> git.ipfire.org Git - thirdparty/openembedded/openembedded-core-contrib.git/commitdiff
go: upgrade 1.25.2 -> 1.25.3
authorPeter Marko <peter.marko@siemens.com>
Fri, 17 Oct 2025 17:14:02 +0000 (19:14 +0200)
committerRichard Purdie <richard.purdie@linuxfoundation.org>
Mon, 27 Oct 2025 11:37:38 +0000 (11:37 +0000)
Upgrade to latest 1.25.x release [1]:

$ git --no-pager log --oneline go1.25.2..go1.25.3
28622c1959 (tag: go1.25.3) [release-branch.go1.25] go1.25.3
e05b2c92d9 [release-branch.go1.25] crypto/x509: rework fix for CVE-2025-58187
79ec0c94f3 [release-branch.go1.25] spec: update spec date to match release date

This release addresses breakage caused by a security patch included in Go 1.25.2
and 1.24.8, which enforced overly restrictive validation on the parsing of X.509
certificates. We've removed those restrictions while maintaining the security
fix that the initial release addressed [2].

[1] https://github.com/golang/go/compare/go1.25.2...go1.25.3
[2] https://groups.google.com/g/golang-announce/c/YEyj6FUNbik

Signed-off-by: Peter Marko <peter.marko@siemens.com>
Signed-off-by: Mathieu Dubois-Briand <mathieu.dubois-briand@bootlin.com>
Signed-off-by: Ross Burton <ross.burton@arm.com>
Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>
meta/recipes-devtools/go/go-1.25.3.inc [moved from meta/recipes-devtools/go/go-1.25.2.inc with 91% similarity]
meta/recipes-devtools/go/go-binary-native_1.25.3.bb [moved from meta/recipes-devtools/go/go-binary-native_1.25.2.bb with 79% similarity]
meta/recipes-devtools/go/go-cross-canadian_1.25.3.bb [moved from meta/recipes-devtools/go/go-cross-canadian_1.25.2.bb with 100% similarity]
meta/recipes-devtools/go/go-cross_1.25.3.bb [moved from meta/recipes-devtools/go/go-cross_1.25.2.bb with 100% similarity]
meta/recipes-devtools/go/go-crosssdk_1.25.3.bb [moved from meta/recipes-devtools/go/go-crosssdk_1.25.2.bb with 100% similarity]
meta/recipes-devtools/go/go-runtime_1.25.3.bb [moved from meta/recipes-devtools/go/go-runtime_1.25.2.bb with 100% similarity]
meta/recipes-devtools/go/go_1.25.3.bb [moved from meta/recipes-devtools/go/go_1.25.2.bb with 100% similarity]

similarity index 91%
rename from meta/recipes-devtools/go/go-1.25.2.inc
rename to meta/recipes-devtools/go/go-1.25.3.inc
index 9d1cf6967002b58361feabc024b0157612a2052d..c29f4d6eceef5e3adc34d0a0b17a09274b0a70ae 100644 (file)
@@ -18,4 +18,4 @@ SRC_URI += "\
     file://0011-cmd-link-stop-forcing-binutils-gold-dependency-on-aa.patch \
     file://0001-runtime-when-using-cgo-on-386-call-C-sigaction-funct.patch \
 "
-SRC_URI[main.sha256sum] = "3711140cfb87fce8f7a13f7cd860df041e6c12f7610f40cac6ec6fa2b65e96e4"
+SRC_URI[main.sha256sum] = "a81a4ba593d0015e10c51e267de3ff07c7ac914dfca037d9517d029517097795"
similarity index 79%
rename from meta/recipes-devtools/go/go-binary-native_1.25.2.bb
rename to meta/recipes-devtools/go/go-binary-native_1.25.3.bb
index fbdef1b695c5336c72f4c4d26397362ad3cf3912..b1d9522cb6ff9621918decca616d08b255e5407b 100644 (file)
@@ -9,9 +9,9 @@ PROVIDES = "go-native"
 
 # Checksums available at https://go.dev/dl/
 SRC_URI = "https://dl.google.com/go/go${PV}.${BUILD_GOOS}-${BUILD_GOARCH}.tar.gz;name=go_${BUILD_GOTUPLE}"
-SRC_URI[go_linux_amd64.sha256sum] = "d7fa7f8fbd16263aa2501d681b11f972a5fd8e811f7b10cb9b26d031a3d7454b"
-SRC_URI[go_linux_arm64.sha256sum] = "9aaeb044bf8dbf50ca2fbf0edc5ebc98b90d5bda8c6b2911526df76f61232919"
-SRC_URI[go_linux_ppc64le.sha256sum] = "91dd35ac3f33baa642d9bac22b626bdb5ee0372cf80e7d782994337f81f34417"
+SRC_URI[go_linux_amd64.sha256sum] = "0335f314b6e7bfe08c3d0cfaa7c19db961b7b99fb20be62b0a826c992ad14e0f"
+SRC_URI[go_linux_arm64.sha256sum] = "1d42ebc84999b5e2069f5e31b67d6fc5d67308adad3e178d5a2ee2c9ff2001f5"
+SRC_URI[go_linux_ppc64le.sha256sum] = "68d1a08bf3567f330717d821b266a0be1c5080bd05dc238b5a43a24ca0c47d7c"
 
 UPSTREAM_CHECK_URI = "https://golang.org/dl/"
 UPSTREAM_CHECK_REGEX = "go(?P<pver>\d+(\.\d+)+)\.linux"