Fix format-security error
bump version to 1.2.6