From 8f1fa10c23a3c0eaffdb8bb1da51a135c1ef6101 Mon Sep 17 00:00:00 2001
From: Jay Flowers <jay.flowers@gmail.com>
Date: Sun, 16 Aug 2026 12:46:08 -0400
Subject: [PATCH] fix: bump Go to 1.25.13 to resolve stdlib vulnerabilities

Updates Go from 1.25.12 to 1.25.13 to fix 4 govulncheck findings:
- GO-2026-6218: quadratic complexity in net/url
- GO-2026-6090: TLS handshake message limit in crypto/tls
- GO-2026-5972: ASN1 recursion depth in encoding/asn1
- GO-2026-5026: Punycode label rejection in net/http

All are stdlib vulnerabilities fixed in go1.25.13.

Generated-by: claude-opus
---
 go.mod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 1f9847e..90898f6 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/unbound-force/replicator
 
-go 1.25.12
+go 1.25.13
 
 require (
 	github.com/charmbracelet/lipgloss v1.1.0