etcd-io/etcd

Bump go 1.26.3 and 1.25.10

Open

#21725 opened on May 8, 2026

View on GitHub
 (2 comments) (0 reactions) (1 assignee)Go (51,701 stars) (10,352 forks)batch import
good first issuetype/feature

Description

What would you like to be added?

The new versions have fixes for several CVE, see https://groups.google.com/g/golang-nuts/c/QEttt5ZoGrE

  • etcd main: 1.26.3
  • etcd release branches: 1.25.10
  • all bbolt and raft: 1.25.10

Why is this needed?

.

Contributor guide

Tech stack
go
Domain
backendbuild system
Issue type
security
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
1
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
under 1 hour
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
clear
Prerequisites
Go modulesGo toolchainGit
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
50
Research direction
Identify the files that define the Go version in the repository: likely go.mod for the main module and submodules (bbolt, raft), and possibly CI configuration files (e.g., .github/workflows/*.yml) or the Makefile. Update the version strings to 1.26.3 for main and 1.25.10 for release branches. Check the existing test suite by running 'go test ./...' to ensure no regressions. Refer to the linked golang nuts discussion for details on the CVEs.