fix(ci): bump Go to 1.26.10 for GO-2026-6809

.github/workflows/README.md

@@ -52,7 +52,7 @@ Runs comprehensive quality checks on every pull request and push to main branch.
 
 ### Required Variables
 
-- `GO_VERSION` (default: 1.26.9)
+- `GO_VERSION` (default: 1.26.10)
 
 ### Example
 

.github/workflows/ci.yml

@@ -6,7 +6,7 @@
 # Required GitHub Secrets: None (all checks run without cloud credentials)
 #
 # Required GitHub Variables:
-#   - GO_VERSION: Go version to use (default: 1.26.9)
+#   - GO_VERSION: Go version to use (default: 1.26.10)
 #
 # Triggered by:
 #   - Pull requests to main/develop
@@ -26,7 +26,7 @@ on:
   workflow_dispatch:
 
 env:
-  GO_VERSION: '1.26.9'
+  GO_VERSION: '1.26.10'
 
 jobs:
   lint:

CHANGELOG.md

@@ -215,6 +215,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/).
 
 ### Fixed
 
+- Bump Go to 1.26.10 to pick up the fix for GO-2026-6809 (crypto/x509), which `govulncheck` now reports against 1.26.9.
 - **`ReshapeBuffer` rejects nil payment caps** instead of mapping them to
   `math.MaxFloat64`: `MaxPaymentPerExchangeUSD` and `MaxPaymentDailyUSD`
   are now required, so an omitted cap can no longer mean unlimited spend on

CONTRIBUTING.md

@@ -49,7 +49,7 @@ By participating in this project, you agree to maintain a respectful and inclusi
 
 ### Prerequisites
 
-- Go 1.26.9 or later, as declared by the module files
+- Go 1.26.10 or later, as declared by the module files
 - Cloud credentials only when intentionally running a cloud-backed sanity binary
 - Git
 

README.md

@@ -21,7 +21,7 @@ There is no root Go module. Use the module directories above when you inspect, b
 
 ## Build and test
 
-Use the Go version declared in each module's `go.mod` (currently Go 1.26.9).
+Use the Go version declared in each module's `go.mod` (currently Go 1.26.10).
 
 ```bash
 make build

ci_cd_sanity_tests/go.mod

@@ -1,6 +1,6 @@
 module github.com/LeanerCloud/cloud-commitments-go/ci_cd_sanity_tests
 
-go 1.26.9
+go 1.26.10
 
 require (
 	github.com/aws/aws-sdk-go-v2 v1.41.5

go.work

@@ -1,4 +1,4 @@
-go 1.26.9
+go 1.26.10
 
 use (
 	./pkg

pkg/go.mod

@@ -1,6 +1,6 @@
 module github.com/LeanerCloud/cloud-commitments-go/pkg
 
-go 1.26.9
+go 1.26.10
 
 // This module contains shared types, provider interfaces, and the exchange package.
 // The exchange package uses the AWS SDK v2 EC2 client stack for RI exchange operations.

providers/aws/go.mod

@@ -1,6 +1,6 @@
 module github.com/LeanerCloud/cloud-commitments-go/providers/aws
 
-go 1.26.9
+go 1.26.10
 
 require (
 	github.com/LeanerCloud/cloud-commitments-go/pkg v0.0.0-20261020191912-205cf99b8ef3

providers/azure/go.mod

@@ -1,6 +1,6 @@
 module github.com/LeanerCloud/cloud-commitments-go/providers/azure
 
-go 1.26.9
+go 1.26.10
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1

providers/gcp/go.mod

@@ -1,6 +1,6 @@
 module github.com/LeanerCloud/cloud-commitments-go/providers/gcp
 
-go 1.26.9
+go 1.26.10
 
 require (
 	cloud.google.com/go/compute v1.54.0