[Snyk] Security upgrade golang from 1.24rc2-bullseye to 1.25rc3-bullseye

[snyk-io]

Snyk has created this PR to fix 5 vulnerabilities in the dockerfile dependencies of this project.

Keeping your Docker base image up-to-date means you’ll benefit from security fixes in the latest version of your chosen image.

Snyk changed the following file(s):

• cli/build/builder.dockerfile

We recommend upgrading to golang:1.25rc3-bullseye, as this image has only 176 known vulnerabilities. To do this, merge this pull request, then verify your application still works as expected.

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score
	Detection of Error Condition Without Action SNYK-DEBIAN11-OPENSSH-8732595	375
	Inappropriate Encoding for Output Context SNYK-DEBIAN11-OPENSSH-530703	370
	Out-of-bounds Read SNYK-DEBIAN11-DB53-2825168	339
	OS Command Injection SNYK-DEBIAN11-OPENSSH-590139	309
	Integer Overflow or Wraparound SNYK-DEBIAN11-ZLIB-6008961	301

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 OS Command Injection

[semanticdiff-com]

Review changes with  

[snyk-io]

🎉 Snyk checks have passed. No issues have been found so far.

✅ security/snyk check is complete. No issues have been found. (View Details)