From 759286e92f9583fa9e37cb495aff96d8dc5ed99b Mon Sep 17 00:00:00 2001
From: Cole Kennedy <cole@testifysec.com>
Date: Thu, 3 Sep 2026 12:14:12 -0500
Subject: [PATCH] deps: bump golang.org/x/crypto to v0.55.0 (CVE-2026-56854
 critical, 9 high); toolchain to Go 1.25

---
 .github/workflows/attested-ci.yaml         | 2 +-
 .github/workflows/ci.yaml                  | 2 +-
 .github/workflows/test-staging-cilock.yaml | 2 +-
 Dockerfile                                 | 2 +-
 go.mod                                     | 4 ++--
 go.sum                                     | 4 ++--
 6 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/attested-ci.yaml b/.github/workflows/attested-ci.yaml
index 7968af7..fabcea9 100644
--- a/.github/workflows/attested-ci.yaml
+++ b/.github/workflows/attested-ci.yaml
@@ -39,7 +39,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version: "1.25"
           check-latest: false
 
       # ---- SA-11: lint + secretscan ----
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 94c4575..bd56a96 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -7,7 +7,7 @@ on:
     branches: [main]
 
 env:
-  GO_VERSION: "1.24"
+  GO_VERSION: "1.25"
 
 jobs:
   lint:
diff --git a/.github/workflows/test-staging-cilock.yaml b/.github/workflows/test-staging-cilock.yaml
index d770133..18d27dc 100644
--- a/.github/workflows/test-staging-cilock.yaml
+++ b/.github/workflows/test-staging-cilock.yaml
@@ -20,7 +20,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version: "1.25"
 
       - name: install tools
         run: |
diff --git a/Dockerfile b/Dockerfile
index ff13d2e..53a11fe 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,5 +1,5 @@
 # Build stage
-FROM golang:1.24-alpine AS builder
+FROM golang:1.25-alpine AS builder
 
 WORKDIR /app
 
diff --git a/go.mod b/go.mod
index 5e33783..875ba58 100644
--- a/go.mod
+++ b/go.mod
@@ -1,11 +1,11 @@
 module github.com/testifysec/dropbox-clone
 
-go 1.24.0
+go 1.25.0
 
 require (
 	github.com/go-chi/chi/v5 v5.2.3
 	github.com/google/uuid v1.6.0
-	golang.org/x/crypto v0.47.0
+	golang.org/x/crypto v0.55.0
 )
 
 require (
diff --git a/go.sum b/go.sum
index 058297c..a6188ea 100644
--- a/go.sum
+++ b/go.sum
@@ -46,5 +46,5 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0=
 github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo=
 github.com/lib/pq v1.10.9 h1:YXG7RB+JIjhP29X+OtkiDnYaXQwpS4JEWq7dtCCRUEw=
 github.com/lib/pq v1.10.9/go.mod h1:AlVN5x4E4T544tWzH6hKfbfQvm3HdbOxrmggDNAPY9o=
-golang.org/x/crypto v0.47.0 h1:V6e3FRj+n4dbpw86FJ8Fv7XVOql7TEwpHapKoMJ/GO8=
-golang.org/x/crypto v0.47.0/go.mod h1:ff3Y9VzzKbwSSEzWqJsJVBnWmRwRSHt/6Op5n9bQc4A=
+golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M=
+golang.org/x/crypto v0.55.0/go.mod h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis=