From 735340e85a5381cc440ba8d59d3bd30aa28e2883 Mon Sep 17 00:00:00 2001 From: Lakshman Patel Date: Sat, 15 Aug 2026 06:45:56 +0530 Subject: [PATCH] chore(tok): bump Go to 1.26.6 to clear govulncheck failures Go 1.26.5 stdlib has reachable vulnerabilities (GO-2026-6218, GO-2026-6091, GO-2026-6090) that fail the scheduled Security check. Bump go.mod and all CI workflow go-version pins to 1.26.6. --- .github/workflows/ci.yml | 2 +- .github/workflows/release.yml | 2 +- .github/workflows/security.yml | 2 +- go.mod | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 1683ba4f..fb1f16e4 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -32,7 +32,7 @@ concurrency: cancel-in-progress: true env: - GO_VERSION: "1.26.5" + GO_VERSION: "1.26.6" jobs: # ------------------------------------------------------------------------- diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 188aade4..fd3def6d 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -27,7 +27,7 @@ jobs: - name: Set up Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 with: - go-version: "1.26.5" + go-version: "1.26.6" cache: true - name: Run GoReleaser diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 315d54e5..7a79bfe8 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -41,7 +41,7 @@ jobs: - name: Set up Go uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 with: - go-version: '1.26.5' + go-version: '1.26.6' - name: Install govulncheck run: go install golang.org/x/vuln/cmd/govulncheck@v1.1.4 diff --git a/go.mod b/go.mod index 613a34ac..69db1d6d 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/GrayCodeAI/tok -go 1.26.5 +go 1.26.6 require ( github.com/BurntSushi/toml v1.6.0