Merge pull request #2111 from microsoft/dev/auto-sync/microsoft/release-branch.go1.24

Update submodule to latest `release-branch.go1.24` in `microsoft/release-branch.go1.24`

Author: bot-for-go[bot]

VERSION

@@ -1 +1 @@
-go1.24.12
+go1.24.13

eng/pipeline/stages/go-builder-matrix-stages.yml

@@ -87,13 +87,10 @@ stages:
           - { os: linux, arch: amd64, config: devscript }
           - { os: linux, arch: amd64, config: test }
           - { os: linux, arch: amd64, config: test, distro: ubuntu }
-          - { os: linux, arch: amd64, config: test, distro: mariner2 }
           - { os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: ubuntu }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2 }
-          - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: mariner2, fips: true }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3 }
           - { experiment: opensslcrypto, os: linux, arch: amd64, config: test, distro: azurelinux3, fips: true }
           - { experiment: boringcrypto, os: linux, arch: amd64, config: test }

eng/pipeline/stages/run-stage.yml

@@ -69,17 +69,12 @@ stages:
             ${{ if eq(parameters.builder.hostArch, 'amd64') }}:
               ${{ if eq(parameters.builder.distro, 'ubuntu') }}:
                 container: ubuntu2204
-              ${{ elseif eq(parameters.builder.distro, 'mariner2') }}:
-                container: mariner2
               ${{ elseif eq(parameters.builder.distro, 'azurelinux3') }}:
                 container: azurelinux3
               ${{ else }}:
-                container: mariner1
+                container: mariner2
             ${{ elseif eq(parameters.builder.hostArch, 'arm64') }}:
-              ${{ if eq(parameters.builder.distro, 'mariner2') }}:
-                container: mariner2arm64
-              ${{ else }}:
-               container: mariner1arm64
+              container: mariner2arm64
 
         variables:
           - group: go-cmdscan-rules

go

@@ -2139,7 +2139,7 @@ index 027bc22c33c921..eba08da985f832 100644
  package fipsonly
 
 diff --git a/src/crypto/tls/handshake_client.go b/src/crypto/tls/handshake_client.go
-index 38bd417a0dca72..8c1ae3c7ec5485 100644
+index 33d9a5be5487bc..665409dd812446 100644
 --- a/src/crypto/tls/handshake_client.go
 +++ b/src/crypto/tls/handshake_client.go
 @@ -11,11 +11,11 @@ import (
@@ -2155,7 +2155,7 @@ index 38bd417a0dca72..8c1ae3c7ec5485 100644
  	"crypto/x509"
  	"errors"
  	"fmt"
-@@ -549,7 +549,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
+@@ -562,7 +562,15 @@ func (c *Conn) pickTLSVersion(serverHello *serverHelloMsg) error {
 
  // Does the handshake, either a full one or resumes old session. Requires hs.c,
  // hs.hello, hs.serverHello, and, optionally, hs.session to be set.
@@ -2173,7 +2173,7 @@ index 38bd417a0dca72..8c1ae3c7ec5485 100644
 
  	isResume, err := hs.processServerHello()
 diff --git a/src/crypto/tls/handshake_client_tls13.go b/src/crypto/tls/handshake_client_tls13.go
-index c0396e75796add..2c00e119cb66e4 100644
+index e134c88fb0ea1f..afb0dce35c5030 100644
 --- a/src/crypto/tls/handshake_client_tls13.go
 +++ b/src/crypto/tls/handshake_client_tls13.go
 @@ -8,12 +8,12 @@ import (
@@ -2220,7 +2220,7 @@ index c0396e75796add..2c00e119cb66e4 100644
  				confTranscript.Sum(nil),
  				8,
 diff --git a/src/crypto/tls/handshake_server.go b/src/crypto/tls/handshake_server.go
-index 6aebb742229a50..d859e1294c3143 100644
+index 69307e95b6b101..dc6e1904949da6 100644
 --- a/src/crypto/tls/handshake_server.go
 +++ b/src/crypto/tls/handshake_server.go
 @@ -64,7 +64,15 @@ func (c *Conn) serverHandshake(ctx context.Context) error {
@@ -2241,7 +2241,7 @@ index 6aebb742229a50..d859e1294c3143 100644
 
  	if err := hs.processClientHello(); err != nil {
 diff --git a/src/crypto/tls/handshake_server_tls13.go b/src/crypto/tls/handshake_server_tls13.go
-index 76fff6974e7403..3ef8b56e5c7898 100644
+index 6d253408c1e160..b4c02c2fc2ff7f 100644
 --- a/src/crypto/tls/handshake_server_tls13.go
 +++ b/src/crypto/tls/handshake_server_tls13.go
 @@ -8,13 +8,14 @@ import (
@@ -2258,10 +2258,10 @@ index 76fff6974e7403..3ef8b56e5c7898 100644
  	"crypto/rsa"
  	"crypto/tls/internal/fips140tls"
 +	"crypto/tls/internal/tls13"
+ 	"crypto/x509"
  	"errors"
  	"hash"
- 	"internal/byteorder"
-@@ -470,15 +471,19 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
+@@ -478,15 +479,19 @@ func (hs *serverHandshakeStateTLS13) checkForResumption() error {
  // interfaces implemented by standard library hashes to clone the state of in
  // to a new instance of h. It returns nil if the operation fails.
  func cloneHash(in hash.Hash, h crypto.Hash) hash.Hash {
@@ -2284,7 +2284,7 @@ index 76fff6974e7403..3ef8b56e5c7898 100644
  	state, err := marshaler.MarshalBinary()
  	if err != nil {
  		return nil
-@@ -572,8 +577,12 @@ func (hs *serverHandshakeStateTLS13) doHelloRetryRequest(selectedGroup CurveID)
+@@ -588,8 +593,12 @@ func (hs *serverHandshakeStateTLS13) doHelloRetryRequest(selectedGroup CurveID)
  		if err := transcriptMsg(helloRetryRequest, confTranscript); err != nil {
  			return nil, err
  		}
@@ -2298,7 +2298,7 @@ index 76fff6974e7403..3ef8b56e5c7898 100644
  			"hrr ech accept confirmation",
  			confTranscript.Sum(nil),
  			8,
-@@ -734,9 +743,13 @@ func (hs *serverHandshakeStateTLS13) sendServerParameters() error {
+@@ -750,9 +759,13 @@ func (hs *serverHandshakeStateTLS13) sendServerParameters() error {
  		if err := transcriptMsg(hs.hello, echTranscript); err != nil {
  			return err
  		}
@@ -2642,10 +2642,10 @@ index e7369542a73270..ff52175e4ac636 100644
  	}
  }
 diff --git a/src/crypto/x509/verify_test.go b/src/crypto/x509/verify_test.go
-index 5595f99ea5e43a..e1a87fa839033a 100644
+index 9a21218ee4b465..0b7a2664e6f5bf 100644
 --- a/src/crypto/x509/verify_test.go
 +++ b/src/crypto/x509/verify_test.go
-@@ -3119,7 +3119,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
+@@ -3166,7 +3166,7 @@ func dsaSelfSignedCNX(t *testing.T) []byte {
  	t.Helper()
  	var params dsa.Parameters
  	if err := dsa.GenerateParameters(&params, rand.Reader, dsa.L1024N160); err != nil {