From 69e610a5c2b76d9df9d2a35ee69680c4b935b9d9 Mon Sep 17 00:00:00 2001 From: Niklas Ye Date: Wed, 21 Oct 2026 22:07:54 +0200 Subject: [PATCH] Scan and build with Go 1.26.10 govulncheck fails on GO-2026-6809, a crypto/x509 flaw in the standard library that is fixed in 1.26.10. Move the workflows' golang image off 1.26.9 the way terdut-server did, so the scan and the shipped binary agree. Claude-Session: https://claude.ai/code/session_016mBLURvJoMuUEr9cB2RpUN --- .gitea/workflows/ci.yaml | 4 ++-- .gitea/workflows/release.yaml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml index c6f60af..1b71a61 100644 --- a/.gitea/workflows/ci.yaml +++ b/.gitea/workflows/ci.yaml @@ -55,7 +55,7 @@ jobs: test: runs-on: ubuntu-latest container: - image: golang:1.26.9-bookworm + image: golang:1.26.10-bookworm volumes: - go-mod-cache:/go/pkg/mod - go-build-cache:/root/.cache/go-build @@ -85,7 +85,7 @@ jobs: security: runs-on: ubuntu-latest container: - image: golang:1.26.9-bookworm + image: golang:1.26.10-bookworm volumes: - go-mod-cache:/go/pkg/mod - go-build-cache:/root/.cache/go-build diff --git a/.gitea/workflows/release.yaml b/.gitea/workflows/release.yaml index 13e50f1..86cbde2 100644 --- a/.gitea/workflows/release.yaml +++ b/.gitea/workflows/release.yaml @@ -26,7 +26,7 @@ jobs: test: runs-on: ubuntu-latest container: - image: golang:1.26.9-bookworm + image: golang:1.26.10-bookworm volumes: - go-mod-cache:/go/pkg/mod - go-build-cache:/root/.cache/go-build