govulncheck: GO-2026-5039 — stdlib@v1.25.9

## Arbitrary inputs are included in errors without any escaping in net/textproto **Vulnerability:** [GO-2026-5039](https://pkg.go.dev/vuln/GO-2026-5039) **CVE:** CVE-2026-42507 **Affected modules:** stdlib@v1.25.9 **Fixed in:** v1.25.11 ### Recommended fix Upgrade Go from v1.25.9 to v1.25.11 in `go.mod` and rebuild. ### Verification After applying the fix, run `make govulncheck` and confirm the vulnerability no longer appears. ### Details When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged. _Detected by govulncheck v1.3.0 on 2026-06-19_