- Removed trust for compromised CA roots and updated CA certificates.
- Upgraded to Go 1.26.10 and golang.org/x/net v0.60.0, fixing multiple net/http, HTTP/2, crypto/tls, and html/template vulnerabilities.
- Bumped OpenTelemetry to v1.45.0 to stop leaking exporter URLs and made Prometheus builds require Go 1.26+.