Skip to content

fix: move the Go toolchain to go1.26.9 - #877

Merged
REPPL merged 1 commit into
mainfrom
fix/go-toolchain-1-26-9
Oct 9, 2026
Merged

REPPL merged 1 commit into
mainfrom
fix/go-toolchain-1-26-9

Conversation

@REPPL

@REPPL REPPL commented Oct 9, 2026 •

Copy link
Copy Markdown
Collaborator

go.mod declared go 1.26.7, and the merge queue's govulncheck job failed on twelve standard-library advisories fixed in go1.26.9 (net/http, net/textproto, crypto/tls, os, html/template). go.mod is the only pin: every setup-go step reads go-version-file: go.mod, and scripts/pinned-toolchain.sh reads go.mod.

  • govulncheck v1.7.0 on go1.26.9: no reachable vulnerability.
  • make preflight clean on the bumped toolchain; receipt minted for 3de91f3.

Resolves: iss-2610090821550872
Assisted-by: Claude:claude-opus-5-5

go.mod declared go 1.26.7, and the merge queue's govulncheck job failed
on twelve standard-library advisories fixed in go1.26.9. go.mod is the
only pin: every setup-go step reads go-version-file and
scripts/pinned-toolchain.sh reads go.mod. govulncheck v1.7.0 on go1.26.9
reports no reachable vulnerability.

Resolves: iss-2610090821550872
Assisted-by: Claude:claude-opus-5-5
@REPPL
REPPL added this pull request to the merge queue Oct 9, 2026
Merged via the queue into main with commit 4416511 Oct 9, 2026
22 of 24 checks passed
@REPPL
REPPL deleted the fix/go-toolchain-1-26-9 branch October 9, 2026 11:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant