From 736ecc7579e6225f3673c4f55a27350f2ed54812 Mon Sep 17 00:00:00 2001
From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com>
Date: Sun, 11 Jan 2026 11:18:27 +0000
Subject: [PATCH] cloudflared/2025.11.1-r2: fix GHSA-93mf-426m-g6x9
 <!--ci-cve-scan:must-fix: GHSA-93mf-426m-g6x9-->

---
 cloudflared.yaml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/cloudflared.yaml b/cloudflared.yaml
index 97e7ece15cb..78384298962 100644
--- a/cloudflared.yaml
+++ b/cloudflared.yaml
@@ -1,7 +1,7 @@
 package:
   name: cloudflared
   version: "2025.11.1"
-  epoch: 2 # GHSA-j5w8-q4qc-rx2x
+  epoch: 3 # GHSA-93mf-426m-g6x9
   description: Cloudflare Tunnel client
   copyright:
     - license: Apache-2.0
@@ -24,6 +24,7 @@ pipeline:
     with:
       deps: |-
         golang.org/x/crypto@v0.45.0
+        github.com/coredns/coredns@v1.12.4
 
   - uses: go/build
     with: