Skip to content

fix(deps): bump Go to 1.26.10 for CVE-2026-111943 - #178

Merged
fyousfi-ionos merged 1 commit into
mainfrom
fix/bump-go-1.26.10
Oct 22, 2026
Merged

fyousfi-ionos merged 1 commit into
mainfrom
fix/bump-go-1.26.10

Conversation

@fyousfi-ionos

Copy link
Copy Markdown
Contributor

Bumps Go from 1.26.9 to 1.26.10 to fix CVE-2026-111943 / GO-2026-6809 (crypto/x509). Main currently fails the image scan and govulncheck on this, which blocks every open PR.

🤖 Generated with Claude Code

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟢 Approval recommended

The targeted patch-version bump is consumed by existing workflows, with no blocking issues identified.

No open issues 🎉

What changed in this PR

Updates the project’s Go toolchain requirement to address the reported crypto/x509 vulnerability and unblock security checks.

Changes:

  • Bumps Go from 1.26.9 to 1.26.10 in go.mod, which existing build and release workflows consume.
File Description
go.mod Raises the Go version requirement to 1.26.10.

Review effort: Balanced

@fyousfi-ionos
fyousfi-ionos enabled auto-merge (squash) October 22, 2026 16:14
@fyousfi-ionos
fyousfi-ionos merged commit 180d882 into main Oct 22, 2026
14 checks passed
@fyousfi-ionos
fyousfi-ionos deleted the fix/bump-go-1.26.10 branch October 22, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants