fix(ci): bump Go to 1.26.10 for GO-2026-6809

CHANGELOG.md

@@ -15,6 +15,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Fixed
 
+- Bump Go to 1.26.10 to pick up the fix for GO-2026-6809 (crypto/x509), which `govulncheck` now reports against 1.26.9.
 - `--max-instances` drop summary: a zero-Count recommendation swept out by the
   `--min-count` floor no longer drives the tally negative (which panicked in
   `DropSummary.Add`), and removed zero-Count entries are now counted and named

CONTRIBUTING.md

@@ -48,7 +48,7 @@ By participating in this project, you agree to maintain a respectful and inclusi
 
 ### Prerequisites
 
-- Go 1.26.9 or later (the floor set by the `go` directive in `go.mod`)
+- Go 1.26.10 or later (the floor set by the `go` directive in `go.mod`)
 - Git
 
 ### Getting Started
@@ -85,7 +85,7 @@ from a copy of the committed `go.work` and append your active worktrees:
 // go.work.local -- gitignored, developer-local
 // Keep this `go` line at or above the modules' own directive, otherwise the
 // workspace is rejected. Copy it from the committed go.work.
-go 1.26.9
+go 1.26.10
 
 use (
     .

go.mod

@@ -1,6 +1,6 @@
 module github.com/LeanerCloud/cloud-commitments-cli
 
-go 1.26.9
+go 1.26.10
 
 require (
 	github.com/aws/aws-sdk-go-v2 v1.41.5

go.work

@@ -1,3 +1,3 @@
-go 1.26.9
+go 1.26.10
 
 use .