Merge pull request #3829 from dtrudg/prep-4.3.4

chore: prep 4.3.4 release

Author: dtrudg

.circleci/config.yml

@@ -6,7 +6,7 @@ orbs:
 parameters:
   go-version:
     type: string
-    default: '1.25.2'
+    default: '1.25.3'
 
 executors:
   node:

CHANGELOG.md

@@ -1,5 +1,13 @@
 # SingularityCE Changelog
 
+## 4.3.4 \[2025-10-14\]
+
+### Security Related Fixes
+
+- GitHub release packages built using Go 1.25.3, due to
+  [large number of denial-of-service CVEs fixed in 1.25.2.](https://groups.google.com/g/golang-announce/c/4Emdl2iQ_bI)
+- All dependencies updated.
+
 ## 4.3.3 \[2025-08-20\]
 
 ### Requirements / Packaging

INSTALL.md

@@ -162,7 +162,7 @@ _**NOTE:** if you are updating Go from a older version, make sure you remove
 `/usr/local/go` before reinstalling it._
 
 ```sh
-export VERSION=1.25.2 OS=linux ARCH=amd64  # change this as you need
+export VERSION=1.25.3 OS=linux ARCH=amd64  # change this as you need
 
 wget -O /tmp/go${VERSION}.${OS}-${ARCH}.tar.gz \
   https://dl.google.com/go/go${VERSION}.${OS}-${ARCH}.tar.gz

e2e/testdata/Dockerfile.nested

@@ -1,6 +1,6 @@
 FROM ubuntu:25.04
 
-ARG GOVERSION="go1.25.2"
+ARG GOVERSION="go1.25.3"
 ARG GOOS="linux"
 ARG GOARCH="amd64"
 ENV PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/local/go/bin