aboutsummaryrefslogtreecommitdiff
path: root/CHANGELOG.md
diff options
context:
space:
mode:
Diffstat (limited to 'CHANGELOG.md')
-rw-r--r--CHANGELOG.md6
1 files changed, 6 insertions, 0 deletions
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2d6db8b..74ff1e3 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,12 @@
## Unreleased
+- Builds need Go 1.25 or newer and use the Go 1.26.8 toolchain, which an
+ older `go` downloads itself. `golang.org/x/text` is updated to v0.41.0.
+ This fixes an infinite loop a crafted file's text could cause
+ (GO-2026-5970) and, through the toolchain, the XML nesting guard
+ (GO-2026-6088) and the `os/exec` and `os` fixes govulncheck reported.
+
## 0.0.6 — 2026-09-14
- Choosing per file: `w` now applies what was decided and quits krino,