Security: CVE-2026-39822 in golang 1.26.4 #1084

Hi!

Golang 1.26.4 is flagging for being vulnerable to CVE-2026-39822. I know the codepath doesn't touch os.Root as far as I can tell, but it's still flagging on security scans. Any timeline for bumping this version to 1.26.5 and making our scanners a little quieter? :)

Ref: https://app.opencve.io/cve/CVE-2026-39822

Thanks!