Go 1.26.4 and 1.25.11 security patch releases

Category: Languages
Status: confirmed
Sources: Go release history, Go downloads
Summary: Go 1.26.4 and Go 1.25.11 were released on 2026-06-02 with security fixes to crypto/x509, mime, and net/textproto packages, plus compiler and runtime bug fixes. Go 1.26.4 additionally fixes crypto/fips140 and the go fix command. Go 1.24 reached end of life on 2026-02-11 and receives no further patches.
Why it matters: The crypto/x509 and net/textproto fixes affect TLS certificate handling and HTTP header parsing; update services running either supported branch.