gnu: go-1.25: Update to 1.25.9 [security-fixes].

go1.25.9 (released 2026-04-07) includes security fixes to the go
command, the compiler, and the archive/tar, crypto/tls, crypto/x509,
html/template, and os packages, as well as bug fixes to the go command,
the compiler, and the runtime.
See: <https://github.com/golang/go/milestone/431>

Containes fixes for:
CVE-2026-32282: os: Root.Chmod can follow symlinks out of the root on
                Linux
CVE-2026-32289: html/template: JS template literal context incorrectly
                tracked
CVE-2026-27144: cmd/compile: no-op interface conversion bypasses overlap
                checking
CVE-2026-27143: cmd/compile: possible memory corruption after bound
                check elimination
CVE-2026-32288: rchive/tar: unbounded allocation when parsing old format
                GNU sparse map
CVE-2026-32283: crypto/tls: multiple key update handshake messages can
                cause connection to deadlock
CVE-2026-27140: cmd/go: trust layer bypass when using cgo and SWIG
CVE-2026-32280: crypto/x509: unexpected work during chain building
CVE-2026-32281: crypto/x509: inefficient policy validation

* gnu/packages/golang.scm (go-1.25): Update to 1.25.9.

Change-Id: Ie5f8efb1588add0b7dfc25122f9588819e02ba9e

1 files changed, 2 insertions, 2 deletions

diff --git a/gnu/packages/golang.scm b/gnu/packages/golang.scm
index 9e8c3bec746..8088f5bb479 100644
--- a/gnu/packages/golang.scm
+++ b/gnu/packages/golang.scm
@@ -1075,7 +1075,7 @@ in the style of communicating sequential processes (@dfn{CSP}).")
   (package
     (inherit go-1.24)
     (name "go")
-    (version "1.25.8")
+    (version "1.25.9")
     (source
      (origin
        (method git-fetch)
@@ -1084,7 +1084,7 @@ in the style of communicating sequential processes (@dfn{CSP}).")
               (commit (string-append "go" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "0vgz80mrxlkljr8ynficwvshinirqxbiv2ikscf941ladbv0g604"))))
+        (base32 "0drn4fqxyj72mpxl6aiwakscwm0xighkcyq6vkr3kjwb7rv6pyxv"))))
     (arguments
      (substitute-keyword-arguments (package-arguments go-1.24)
        ((#:phases phases)