From f283b62319a273cf7860af4d56ebefe3c49b6913 Mon Sep 17 00:00:00 2001
From: Sourcegraph Egg <egg@sourcegraph.com>
Date: Wed, 29 Apr 2026 08:35:59 +0000
Subject: [PATCH] chore: bump go directive to 1.25.9/1.26.2 and fix trivy CVEs

---
 go.mod | 15 ++++++++++++++-
 1 file changed, 14 insertions(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 0b5bf4c..d259889 100644
--- a/go.mod
+++ b/go.mod
@@ -1,8 +1,21 @@
 module github.com/sourcegraph/go-ctags
 
-go 1.14
+go 1.25.9
 
 require (
 	github.com/google/go-cmp v0.5.9
 	github.com/hexops/autogold v1.3.1
 )
+
+require (
+	github.com/fatih/color v1.13.0 // indirect
+	github.com/hexops/gotextdiff v1.0.3 // indirect
+	github.com/hexops/valast v1.4.3 // indirect
+	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-isatty v0.0.16 // indirect
+	github.com/nightlyone/lockfile v1.0.0 // indirect
+	golang.org/x/mod v0.7.0 // indirect
+	golang.org/x/sys v0.3.0 // indirect
+	golang.org/x/tools v0.4.0 // indirect
+	mvdan.cc/gofumpt v0.4.0 // indirect
+)