fix CVE for tink-worker

SPECS/tink-worker/tink-worker.signatures.json

@@ -1,7 +1,7 @@
 {
   "Signatures": {
-    "tink-worker-v1.1.2.tar.gz": "d8068506964758d807c658c1589f44c22359aa8f0f954797e308f358530a275f",
+    "tink-worker-v1.1.4.tar.gz": "794259f4c3b7d41beced1863764885144a47881245f0e640ab827ca3f03d7e8f",
     "tink-worker.service": "0bd4bdf62618966a33567859e78fd7f88269275a1c730f8c472f4a266443e404",
-    "tink-worker-v1.1.2-vendor.tar.gz": "c917e973ab5fc685f4ca9993e1d306236fea6090b780b2bbdf8c1956e9d5e6a3"
+    "tink-worker-v1.1.4-vendor.tar.gz": "6b1840a79530a7ab0077dc0630e07200a576c4c30480a28c66ba6f8c74842ccb"
   }
 }

SPECS/tink-worker/tink-worker.spec

@@ -2,8 +2,8 @@
 
 Summary:        In-memory Operating System Installation Environment for Executing Tinkerbell Workflows
 Name:           tink-worker
-Version:        1.1.2
-Release:        2%{?dist}
+Version:        1.1.4
+Release:        1%{?dist}
 Distribution:   Edge Microvisor Toolkit
 Vendor:         Intel Corporation
 License:        Apache-2.0
@@ -14,7 +14,7 @@ Source2:        tink-worker-v%{version}-vendor.tar.gz
 
 %{?systemd_requires}
 BuildRequires:  golang < 1.25.0
-BuildRequires:  golang >= 1.24.7
+BuildRequires:  golang >= 1.24.9
 BuildRequires:  systemd-rpm-macros
 
 %description
@@ -46,7 +46,14 @@ install -Dp -m0644 %{SOURCE1} %{buildroot}%{_unitdir}/tink-worker.service
 %{_unitdir}/tink-worker.service
 
 %changelog
-* Tue Nov 25 2025 Lee Chee Yang <[email protected]> - 1.0.2-2
+* Tue Dec 2 2025 Andy <[email protected]> - 1.1.4-1
+- Update version to fix CVE
+- CVE-2025-47913
+- CVE-2025-47914
+- CVE-2025-52881
+- CVE-2024-25621
+
+* Tue Nov 25 2025 Lee Chee Yang <[email protected]> - 1.1.2-2
 - amend build required golang version
 
 * Mon Nov 3 2025 Andy <[email protected]> - 1.1.2-1

cgmanifest.json

@@ -29606,8 +29606,8 @@
         "type": "other",
         "other": {
           "name": "tink-worker",
-          "version": "1.1.2",
-          "downloadUrl": "https://github.com/open-edge-platform/infra-onboarding/archive/refs/tags/tink-worker/v1.1.2.tar.gz"
+          "version": "1.1.4",
+          "downloadUrl": "https://github.com/open-edge-platform/infra-onboarding/archive/refs/tags/tink-worker/v1.1.4.tar.gz"
         }
       }
     },