Skip to content

bump Go toolchain for CVE-2026-111943 - #770

Merged
Mzack9999 merged 1 commit into
devfrom
fix/go-toolchain-cve
Oct 23, 2026
Merged

Mzack9999 merged 1 commit into
devfrom
fix/go-toolchain-cve

Conversation

@dogancanbakir

@dogancanbakir dogancanbakir commented Oct 20, 2026 •

Copy link
Copy Markdown
Member

Fixes #769

Requires go 1.26.10 in go.mod (go install ignores toolchain) so builds include the CVE-2026-111943 fix (golang/go#82345). Workflows now read the Go version from go.mod instead of pinning it.

@dogancanbakir dogancanbakir self-assigned this Oct 20, 2026
@dogancanbakir
dogancanbakir changed the base branch from main to dev October 22, 2026 05:26
@dogancanbakir dogancanbakir reopened this Oct 22, 2026
@Mzack9999
Mzack9999 merged commit b3cc2c5 into dev Oct 23, 2026
13 checks passed
@Mzack9999
Mzack9999 deleted the fix/go-toolchain-cve branch October 23, 2026 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants