Sharlatan Hellseher 391200d054 gnu: go-1.25: Update to 1.25.8 [security-fixes]. ...

go1.25.8 (released 2026-03-05) includes security fixes to the
html/template, net/url, and os packages, as well as bug fixes to the go
command, the compiler, and the os package.

See: <https://github.com/golang/go/compare/go1.25.7...go1.25.8>,
<https://www.openwall.com/lists/oss-security/2026/03/06/1>

Containes fixes for:
CVE-2026-27142: URLs in meta content attribute actions are not escaped
                in html/template.
CVE-2026-25679: Incorrect parsing of IPv6 host literals in net/url.
CVE-2026-27139: FileInfo can escape from a Root in os.

* gnu/packages/golang.scm (go-1.25): Update to 1.25.8.

Change-Id: I01a80a78f20075fe6c05c46f97dfe35f770a99a0

2026-03-12 11:18:05 +00:00

..

bootloader

bootloader: grub: Always use rumpdisk-style root for the 64-bit Hurd.

2026-03-05 07:24:02 +01:00

build

file-systems: canonicalize-device-spec: Wait for device to exist.

2026-02-23 11:56:12 +09:00

home

gnu: home: dotfiles: Fix inclusion of directories having .git in their name.

2026-03-07 23:31:14 +01:00

installer

installer: run-wifi-page: Handle null ‘service-items’.

2026-02-11 12:14:13 +08:00

machine

…

packages

gnu: go-1.25: Update to 1.25.8 [security-fixes].

2026-03-12 11:18:05 +00:00

services

services: Add fossil-service-type.

2026-03-11 18:27:46 +01:00

system

system: hurd: Remove %hurd64-default-* variants.

2026-03-09 13:01:10 +01:00

tests

services: Add fossil-service-type.

2026-03-11 18:27:46 +01:00

artwork.scm

…

bootloader.scm

…

ci.scm

ci: Add provenance information for ‘guix’ jobs.

2026-02-20 22:34:55 +01:00

compression.scm

…

home.scm

home: services: Add ‘transient’ and ‘timer’ to ‘%base-home-services’.

2025-01-26 22:09:27 +01:00

image.scm

…

installer.scm

…

local.mk

gnu: sbcl-cl-ana: Update to 0.0.0-3.88abde5.

2026-03-11 12:24:18 -04:00

machine.scm

…

packages.scm

…

services.scm

…

system.scm

…

tests.scm

…