gnu: go-1.25: Update to 1.25.12 [security-fixes].

go1.25.12 (released 2026-07-07) includes security fixes to the
crypto/tls and os packages, as well as bug fixes to the compiler, the go
command, and the net and os packages.

See: <https://github.com/golang/go/milestone/438>,
<https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc>.

Contains fixes for:
CVE-2026-39822: os: Root escape via symlink plus trailing slash
CVE-2026-42505: crypto/tls: Encrypted Client Hello privacy leak

* gnu/packages/golang.scm (go-1.25): Update to 1.25.12.
[phases]{remove-testscript-mod_get_fips140_issue73649.txt}: New phase,
remove test script file requiring connection to Internet.

1 files changed, 9 insertions, 2 deletions

diff --git a/gnu/packages/golang.scm b/gnu/packages/golang.scm
index a6825bbc511..469070e9f69 100644
--- a/gnu/packages/golang.scm
+++ b/gnu/packages/golang.scm
@@ -1087,7 +1087,7 @@ in the style of communicating sequential processes (@dfn{CSP}).")
   (package
     (inherit go-1.24)
     (name "go")
-    (version "1.25.11")
+    (version "1.25.12")
     (source
      (origin
        (method git-fetch)
@@ -1096,7 +1096,7 @@ in the style of communicating sequential processes (@dfn{CSP}).")
               (commit (string-append "go" version))))
        (file-name (git-file-name name version))
        (sha256
-        (base32 "0l9z57fzjca7z038yxkkxc42f18hcnznbfd3cq4ipng9cp5l2zfc"))))
+        (base32 "13191v8vixwf9a1yrn7hz828xfgdgm5dxx4vp0h4s0bzl4rzjn32"))))
     (arguments
      (substitute-keyword-arguments (package-arguments go-1.24)
        ((#:phases phases)
@@ -1109,6 +1109,13 @@ in the style of communicating sequential processes (@dfn{CSP}).")
                 (substitute* "src/runtime/synctest_test.go"
                   (("TestSynctest\\(.*" all)
                    (string-append all "\n        t.Skip(\"golang.org/issue/73977\")\n")))))
+            (add-after 'unpack 'remove-testscript-mod_get_fips140_issue73649.txt
+              (lambda _
+                ;; vcs-test.golang.org rerouted to http://127.0.0.1:46381
+                ;; https://vcs-test.golang.org rerouted to https://127.0.0.1:44403
+                ;; go test proxy running at GOPROXY=http://127.0.0.1:40005/mod
+                ;; 2026/07/17 10:05:01 http: TLS handshake error from 127.0.0.1:33040: EOF
+                (delete-file "src/cmd/go/testdata/script/mod_get_fips140_issue73649.txt")))
             #$@(if (target-aarch64?)
                    '((add-after 'unpack 'skip-shaky-tests-on-aarch64-system
                       (lambda _