Hello team, could you please merge the following dependabot PR?
That would fix multiple CVEs:
| Name |
Type |
Version Installed |
Vulnerability ID |
Fixed in |
Severity |
Path |
| stdlib |
go-module |
go1.25.3 |
CVE-2025-61729 |
1.24.11 1.25.5 |
High |
/bin/ratelimit |
| stdlib |
go-module |
go1.25.3 |
CVE-2025-61727 |
1.24.11 1.25.5 |
Medium |
/bin/ratelimit |
Evidence:
grype scanner against the latest sha in the DockerHub registry:
grype scanner against the locally built image from the Dockerfile:
Thank you!