niklas/terdut-server
1
0
Fork 0
Code Issues 10 Pull Requests Actions Packages Projects Releases 67 Wiki Activity

Build and scan with Go 1.26.10
CI / chart (push) Successful in 0s
Details
CI / security (push) Successful in 2m41s
Details
CI / test (push) Successful in 7m7s
Details
Release / test (push) Successful in 10s
Details
Release / chart (push) Successful in 2s
Details
Release / image (push) Successful in 2m37s
Details
Release / scan-image (push) Successful in 8s
Details
Release / binaries (push) Successful in 2m51s
Details

Browse Source 
govulncheck started failing CI on GO-2026-6809, a crypto/x509 flaw in the
standard library that is fixed in 1.26.10 and reachable through
http.Server.ListenAndServe. golang:1.26.9 is what ci.yaml, release.yaml and
the Dockerfile build with, so all five pins move together: the scan and the
shipped binary must agree on the toolchain, as in 3173abf.

No code change; go.mod still says go 1.25.9.

Claude-Session: https://claude.ai/code/session_016mBLURvJoMuUEr9cB2RpUN
This commit is contained in:
Niklas Ye
2026-10-21 21:55:04 +02:00
parent 12535e0e9a
commit 94c394e8f1
3 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/ci.yaml
+2 -2
View File
@@ -35,7 +35,7 @@ jobs:
# Runs inside the toolchain image rather than installing Go per job. Note this puts # Runs inside the toolchain image rather than installing Go per job. Note this puts
# the job on the dind bridge, which cannot reach github.com or get.helm.sh -- # the job on the dind bridge, which cannot reach github.com or get.helm.sh --
# proxy.golang.org and git.ryuvia.com are reachable, which is all this job needs. # proxy.golang.org and git.ryuvia.com are reachable, which is all this job needs.
image: golang:1.26.9-bookworm image: golang:1.26.10-bookworm
# act_runner destroys a job's own volumes when it finishes, so without these every # act_runner destroys a job's own volumes when it finishes, so without these every
# run re-downloads the whole module graph. The names must appear in the runner's # run re-downloads the whole module graph. The names must appear in the runner's
# container.valid_volumes allowlist (charts/act-runner in the k8s repo); unlisted # container.valid_volumes allowlist (charts/act-runner in the k8s repo); unlisted
@@ -101,7 +101,7 @@ jobs:
security: security:
runs-on: ubuntu-latest runs-on: ubuntu-latest
container: container:
image: golang:1.26.9-bookworm image: golang:1.26.10-bookworm
volumes: volumes:
- go-mod-cache:/go/pkg/mod - go-mod-cache:/go/pkg/mod
- go-build-cache:/root/.cache/go-build - go-build-cache:/root/.cache/go-build
.gitea/workflows/release.yaml
+2 -2
View File
@@ -30,7 +30,7 @@ jobs:
test: test:
runs-on: ubuntu-latest runs-on: ubuntu-latest
container: container:
image: golang:1.26.9-bookworm image: golang:1.26.10-bookworm
volumes: volumes:
- go-mod-cache:/go/pkg/mod - go-mod-cache:/go/pkg/mod
- go-build-cache:/root/.cache/go-build - go-build-cache:/root/.cache/go-build
@@ -71,7 +71,7 @@ jobs:
needs: test needs: test
runs-on: ubuntu-latest runs-on: ubuntu-latest
container: container:
image: golang:1.26.9-bookworm image: golang:1.26.10-bookworm
volumes: volumes:
- go-mod-cache:/go/pkg/mod - go-mod-cache:/go/pkg/mod
- go-build-cache:/root/.cache/go-build - go-build-cache:/root/.cache/go-build
Dockerfile
+1 -1
View File
@@ -4,7 +4,7 @@
# in per platform. The CI runner has no binfmt registration and no way to get one (the # in per platform. The CI runner has no binfmt registration and no way to get one (the
# JS action that used to install it cannot run there), so this is not just an # JS action that used to install it cannot run there), so this is not just an
# optimisation -- it is what makes the arm64 image buildable at all. # optimisation -- it is what makes the arm64 image buildable at all.
FROM --platform=$BUILDPLATFORM golang:1.26.9-alpine AS builder FROM --platform=$BUILDPLATFORM golang:1.26.10-alpine AS builder
WORKDIR /src WORKDIR /src
COPY go.mod go.sum ./ COPY go.mod go.sum ./
RUN go mod download RUN go mod download