From 335d2e16b77375a5ebd0a2a106e13e4ff01b6d6b Mon Sep 17 00:00:00 2001 From: bodaay Date: Mon, 5 Oct 2026 11:51:12 +0300 Subject: [PATCH] Upgrade to Go 1.26.8 (go.mod, Docker builder, govulncheck v1.8.0) Unblocks Dependabot #65: golang.org/x/crypto v0.57.0 requires Go 1.26. Uses the latest 1.26 patch (1.26.8) rather than 1.26.0, which has 24 known reachable standard-library vulnerabilities. Moves govulncheck to v1.8.0, which needs Go 1.26. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/security.yml | 2 +- Dockerfile | 2 +- go.mod | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 9fb9e90..766d4d6 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -34,7 +34,7 @@ jobs: go-version-file: go.mod - name: Install govulncheck - run: go install golang.org/x/vuln/cmd/govulncheck@v1.7.0 # pinned: v1.8.0+ needs Go 1.26; bump with go.mod + run: go install golang.org/x/vuln/cmd/govulncheck@v1.8.0 # pinned; v1.8.0 needs Go 1.26 — bump together with go.mod - name: Scan server module run: govulncheck ./... diff --git a/Dockerfile b/Dockerfile index c419e31..353a439 100644 --- a/Dockerfile +++ b/Dockerfile @@ -8,7 +8,7 @@ # --------------------------------------------------------------------------- # Stage 1: Build the Go binary # --------------------------------------------------------------------------- -FROM golang:1.25-alpine AS builder +FROM golang:1.26-alpine AS builder WORKDIR /src diff --git a/go.mod b/go.mod index 7790fb2..7dce12d 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module simpleauth -go 1.25.14 +go 1.26.8 require ( github.com/go-ldap/ldap/v3 v3.4.14