Fix security vulnerabilities by upgrading to Go 1.26.2

[areddy548]

• Fixes CVE-2026-32281 (medium) in crypto/x509
• Fixes CVE-2026-32280 (high) in crypto/x509
• Fixes CVE-2026-33810 (high) in crypto/x509
• Fixes CVE-2026-32289 (medium) in html/template

All vulnerabilities will be resolved by upgrading from Go 1.26 to 1.26.2

[areddy548]

@chadlwilson please look into this PR.

[areddy548]

vulnerabilities identified in our scan

CVE-2026-32281 	 medium 	 crypto/x509 		 1.26.1 		 fixed in 1.25.9, 1.26.2
CVE-2026-32280 	 high 	 crypto/x509 		 1.26.1 		 fixed in 1.25.9, 1.26.2
CVE-2026-33810 	 high 	 crypto/x509 		 1.26.1 		 fixed in 1.26.2
CVE-2026-32289 	 medium 	 html/template 		 1.26.1 		 fixed in 1.25.9, 1.26.2

[areddy548]

I forgot to bump the plugin version , will do it now.

[areddy548]

How can we make this plugin target latest go version then? Please suggest

[chadlwilson]

I've mentioned before - CI always runs with latest golang patch version, as long as it's not locked in go.mod.

So a new release just needs to be built with a new plugin version as the release trigger.

html-report/.github/workflows/deploy.yml

Lines 14 to 18 in 8ef6993

	- name: Set up Go
	uses: actions/setup-go@v6
	with:
	check-latest: true
	go-version-file: 'go.mod'

I've been doing it this way because gauge has dozens of repos, plus dependabot does not support automatic bumping of go version via go.mod that I can find, and theres no way i have time to manually do this across all these repos for every runtime bug.

[gaugebot]

@areddy548 Thank you for contributing to html-report. Your pull request has been labeled as a release candidate 🎉🎉.

Merging this PR will trigger a release.

Please bump up the version as part of this PR.

Instructions to bump the version can found at CONTRIBUTING.md

If the CONTRIBUTING.md file does not exist or does not include instructions about bumping up the version, please looks previous commits in git history to see what changes need to be done.

[chadlwilson]

Can see in the actions logs:

Run actions/setup-go@v6
Setup go version spec 1.26
Attempting to resolve the latest version from the manifest...
matching 1.26...
Resolved as '1.26.2'
Attempting to download 1.26.2...
matching 1.26.2...
Acquiring 1.26.2 from https://github.com/actions/go-versions/releases/download/1.26.2-24114135105/go-1.26.2-linux-x64.tar.gz

[areddy548]

@chadlwilson Thank you for your support.