Update Go to 1.25.6 to address CVE-2025-61726, CVE-2025-61728, CVE-2025-61730

[Copilot]

Go 1.25.5 contains three CVEs (two HIGH, one MEDIUM severity) fixed in 1.25.6.

Changes

• Dockerfile: Update base image to golang:1.25.6
• go.mod: Bump Go version requirement to 1.25.6

GitHub workflows already reference go-version-file: 'go.mod' and will automatically use the updated version.

Original prompt

---

This section details on the original issue you should resolve

<issue_title>Vulnerability in Golang v1.25.5</issue_title>
<issue_description>Hello,
there are new vulnerabilities in Go 1.25.5.
Here is a Trivy scan extract:

Package Name Installed Version Fixed Version Vulnerability ID Severity
stdlib v1.25.5 1.24.12, 1.25.6 CVE-2025-61726 HIGH
stdlib v1.25.5 1.24.12, 1.25.6 CVE-2025-61728 HIGH
stdlib v1.25.5 1.24.12, 1.25.6 CVE-2025-61730 MEDIUM

Would it be possible to release a new version based on Go >= 1.25.6 @jwilder ?
Thanks in advance.
</issue_description>

<agent_instructions>Update go to 1.25.6 in Dockerfiles and build tooling. </agent_instructions>

Comments on the Issue (you are @copilot in this section)

• Fixes Vulnerability in Golang v1.25.5 #265

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.