Skip to content

chore: bump Go to 1.26.10 [release/0.11] - #1917

Merged
joanestebanr merged 4 commits into
release/0.11from
chore/bump-go-1.26.10-release-0.11
Oct 21, 2026
Merged

joanestebanr merged 4 commits into
release/0.11from
chore/bump-go-1.26.10-release-0.11

Conversation

@joanestebanr

Copy link
Copy Markdown
Collaborator

🔄 Changes Summary

  • Bump Go from 1.25.7 to 1.26.10 on release/0.11 (go.mod, Dockerfile, Dockerfile.debug and CI workflows).
  • Motivation: security advisory about a compromised certificate authority; Go 1.26.10 is the patched 1.26 release (alternative: 1.27.3).

⚠️ Breaking Changes

  • None. No config, API/CLI or feature changes.

✅ Testing

  • 🤖 Automatic: go build ./... passes with go1.26.10 locally; CI runs unit, lint, govulncheck and e2e with the new version.

📝 Notes

  • This is a minor-version jump (1.25 → 1.26) on a release branch, since no 1.25.x patch was listed in the advisory.
  • A matching PR targets the other release branch.

🤖 Generated with Claude Code

Security advisory: a compromised certificate authority. Bump the Go
toolchain in go.mod, Dockerfiles and CI workflows.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@chatgpt-codex-connector

chatgpt-codex-connector Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review Status Commit Review trigger
📝 Code Review ✅ Completed 2026-10-21T09:54:19.495252Z b39b889 PR opened
ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

…60.0

golangci-lint v2.4.0 is built with Go 1.25 and refuses to lint a Go 1.26
module. x/net v0.60.0 fixes GO-2026-6617 and related govulncheck findings.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Preallocate slices (prealloc) and annotate bounded indexes that gosec
G602 flags as out of range. No behaviour change.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
Previous pin executed foundryup via bash, which fails now that foundryup
is distributed as a native binary.

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@joanestebanr
joanestebanr merged commit fd35029 into release/0.11 Oct 21, 2026
47 of 48 checks passed
@joanestebanr
joanestebanr deleted the chore/bump-go-1.26.10-release-0.11 branch October 21, 2026 13:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants