| <p>Hello gophers,</p> |
| <p>We have just released go1.25rc2, a release candidate version of Go 1.25.<br> |
| It is cut from release-branch.go1.25 at the revision tagged go1.25rc2.</p> |
| <p>This release includes 1 security fix following the <a href="https://go.dev/doc/security/policy">security policy</a>:</p> |
| <ul> |
| <li> |
| <p>cmd/go: unexpected command execution in untrusted VCS repositories</p> |
| <p>This is CVE-2025-4674 and <a href="https://go.dev/issue/74380">https://go.dev/issue/74380</a>.</p> |
| </li> |
| </ul> |
| <p>Please try your production load tests and unit tests with the new version.<br> |
| Your help testing these pre-release versions is invaluable.</p> |
| <p>Report any problems using the issue tracker:<br> |
| <a href="https://go.dev/issue/new">https://go.dev/issue/new</a></p> |
| <p>Please consider opting in to <a href="https://go.dev/doc/telemetry">Go telemetry</a> if you haven't already.<br> |
| Go telemetry helps validate this release candidate and future Go releases.<br> |
| You can opt in by running the following command:</p> |
| <pre><code>$ go telemetry on |
| </code></pre> |
| <p>If you have Go installed already, an easy way to try go1.25rc2<br> |
| is by using the go command:</p> |
| <pre><code>$ go install golang.org/dl/go1.25rc2@latest |
| $ go1.25rc2 download |
| </code></pre> |
| <p>You can download binary and source distributions from the usual place:<br> |
| <a href="https://go.dev/dl/#go1.25rc2">https://go.dev/dl/#go1.25rc2</a></p> |
| <p>To find out what has changed in Go 1.25, read the draft release notes:<br> |
| <a href="https://tip.golang.org/doc/go1.25">https://tip.golang.org/doc/go1.25</a></p> |
| <p>Cheers,<br> |
| Bob for the Go team</p> |
