hashicorp · sanikachavan5 · Oct 13, 2025 · Oct 13, 2025 · Oct 13, 2025 · Oct 13, 2025
@@ -0,0 +1,3 @@
+```release-note:improvement
+security: Upgrade golang to 1.25.2.
+```
@@ -1 +1 @@
-1.25.1
+1.25.2
@@ -17,9 +17,10 @@ import (
 	"sync/atomic"
 	"time"

-	"github.com/hashicorp/go-uuid"
 	"github.com/mitchellh/go-testing-interface"

+	"github.com/hashicorp/go-uuid"
+
 	"github.com/hashicorp/consul/acl"
 	"github.com/hashicorp/consul/agent/structs"
 )
@@ -222,6 +223,9 @@ func testLeafWithID(t testing.T, spiffeId CertURI, dnsSAN string, root *structs.
 	if err != nil {
 		return "", "", fmt.Errorf("error getting CA key type: %s", err)
 	}
+	if dnsSAN == "" {
+		dnsSAN = "localhost"
+	}

 	// Cert template for generation
 	template := x509.Certificate{
@@ -241,7 +245,11 @@ func testLeafWithID(t testing.T, spiffeId CertURI, dnsSAN string, root *structs.
 		NotBefore:      time.Now(),
 		AuthorityKeyId: testKeyID(t, caSigner.Public()),
 		SubjectKeyId:   testKeyID(t, pkSigner.Public()),
-		DNSNames:       []string{dnsSAN},
+	}
+
+	// Only add DNS SANs if dnsSAN is not empty to avoid malformed SAN errors in Go 1.25.2+
+	if dnsSAN != "" {
+		template.DNSNames = []string{dnsSAN}
 	}

 	// Create the certificate, PEM encode it and return that value.

@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/api

-go 1.25.1
+go 1.25.2

 replace github.com/hashicorp/consul/sdk => ../sdk


@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/envoyextensions

-go 1.25.1
+go 1.25.2

 replace (
 	github.com/hashicorp/consul/api => ../api

@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul

-go 1.25.1
+go 1.25.2

 replace (
 	github.com/hashicorp/consul/api => ./api

@@ -1,5 +1,5 @@
 module github.com/hashicorp/consul

-go 1.25.1
+go 1.25.2

 require google.golang.org/protobuf v1.28.1
@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/internal/tools/proto-gen-rpc-glue/e2e

-go 1.25.1
+go 1.25.2

 replace github.com/hashicorp/consul => ./consul


@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/internal/tools/proto-gen-rpc-glue

-go 1.25.1
+go 1.25.2

 require github.com/stretchr/testify v1.8.4


@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/internal/tools/protoc-gen-consul-rate-limit

-go 1.25.1
+go 1.25.2

 replace github.com/hashicorp/consul/proto-public => ../../../proto-public


@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/proto-public

-go 1.25.1
+go 1.25.2

 require (
 	google.golang.org/grpc v1.75.0

@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/sdk

-go 1.25.1
+go 1.25.2

 require (
 	github.com/hashicorp/go-cleanhttp v0.5.2

@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/test-integ

-go 1.25.1
+go 1.25.2

 require (
 	github.com/google/go-cmp v0.7.0

@@ -1,6 +1,6 @@
 module test-sds-server

-go 1.25.1
+go 1.25.2

 require (
 	github.com/envoyproxy/go-control-plane v0.13.4

@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/test/integration/consul-container

-go 1.25.1
+go 1.25.2

 require (
 	fortio.org/fortio v1.54.0

@@ -1,6 +1,6 @@
 module main

-go 1.25.1
+go 1.25.2

 require github.com/tetratelabs/proxy-wasm-go-sdk v0.21.0


@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/testing/deployer

-go 1.25.1
+go 1.25.2

 require (
 	github.com/avast/retry-go v3.0.0+incompatible

@@ -1,6 +1,6 @@
 module github.com/hashicorp/consul/troubleshoot

-go 1.25.1
+go 1.25.2

 replace (
 	github.com/hashicorp/consul/api => ../api