fix(security): remediate CVE vulnerabilities

[ulucinar]

Summary

This PR fixes CVE vulnerabilities identified by security scanning.

Vulnerabilities Fixed

CVE/GHSA	Severity	Package	Fixed Version
CVE-2025-68121	Critical	stdlib	go1.24.13
CVE-2025-61726	High	stdlib	go1.24.13
CVE-2025-61731	High	stdlib	go1.24.13
CVE-2025-61732	High	stdlib	go1.24.13
CVE-2025-61728	Medium	stdlib	go1.24.13
CVE-2025-61730	Medium	stdlib	go1.24.13

Changes Made

• Updated Go version from 1.24.11 to 1.24.13 in go.mod

References

• CVE-2025-68121
• CVE-2025-61726
• CVE-2025-61731
• CVE-2025-61732
• CVE-2025-61728
• CVE-2025-61730

Verification

• Rescanned with cve-scan skill after fixes
• All listed vulnerabilities resolved

[ulucinar]

Build Failure Analysis

Check: e2e-tests
Status: Failed
Analyzed: 2026-02-25T17:30:55Z

Summary

The e2e-tests check failed due to a timeout waiting for the Crossplane deployment to become ready during test initialization.

Root Cause

The test infrastructure (Kind cluster with Crossplane) failed to initialize within the expected time window. The Crossplane deployment and pods did not reach the ready state before the timeout expired. Additionally, GitHub's cache service was unavailable during this run, which may have contributed to the failure.

This is a transient CI infrastructure issue, not a code problem.

Error Details

error: timed out waiting for the condition on deployments/crossplane
error: timed out waiting for the condition on pods/crossplane-548864b989-xglpg
make: *** [build/makelib/local.xpkg.mk:21: local.xpkg.init] Error 1

Recommendation

Retry the failed workflow run. This is a transient infrastructure issue that should resolve on retry.

gh run rerun 22408027298 --failed --repo crossplane-contrib/provider-helm

---

_{This analysis was generated by the build-failure-analyze skill.}

[sergenyalcin]

Thanks @ulucinar LGTM!