- Update Go runtime to 1.26.10, fixing CVE‑2026‑111943 by rejecting TLS chains that include compromised eMudhra intermediates.
- Image pulls/pushes will now fail TLS verification if a registry’s certificate chain uses the revoked eMudhra G3B/G3C intermediates; registries must replace the chain.
- Packaging updates applied to docker/cli and moby/moby for this release.