Skip to content

bump Go toolchain for CVE-2026-111943 - #770

Merged
Mzack9999 merged 1 commit into
devfrom
fix/go-toolchain-cve
Oct 23, 2026
Merged

Mzack9999 merged 1 commit into
devfrom
fix/go-toolchain-cve

Conversation

@dogancanbakir

@dogancanbakir dogancanbakir commented Oct 20, 2026 •

Copy link
Copy Markdown
Member

Fixes #769

Requires go 1.26.10 in go.mod (go install ignores toolchain) so builds include the CVE-2026-111943 fix (golang/go#82345). Workflows now read the Go version from go.mod instead of pinning it.

@dogancanbakir dogancanbakir self-assigned this Oct 20, 2026
@dogancanbakir
dogancanbakir changed the base branch from main to dev October 22, 2026 05:26
@dogancanbakir dogancanbakir reopened this Oct 22, 2026
@Mzack9999
Mzack9999 merged commit b3cc2c5 into dev Oct 23, 2026
13 checks passed
@Mzack9999
Mzack9999 deleted the fix/go-toolchain-cve branch October 23, 2026 12:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bump Go toolchain for CVE-2026-111943

2 participants