From 9abf07f2cb50584d45cbf23a7f69f067936add13 Mon Sep 17 00:00:00 2001 From: Niklas Ye Date: Sat, 19 Sep 2026 17:56:20 +0200 Subject: [PATCH] Build on Go 1.25 again, as the Dockerfile does v0.10.0 never produced an image. Adding bcrypt in dc3879e ran `go get golang.org/x/crypto`, which took the newest release, v0.57.0. That version declares `go 1.26.0`, and so does the x/sys v0.48.0 it pulled along, so go.mod's own directive rose from 1.25.9 to 1.26.0. The Dockerfile builds on golang:1.25-alpine with GOTOOLCHAIN=local, and refused: go: go.mod requires go >= 1.26.0 (running go 1.25.14; GOTOOLCHAIN=local) Nothing before the image job could see it. The local toolchain is 1.26, and the pipeline's test job runs on the runner's Go rather than in the Dockerfile's builder. So the gate passed on a module the image could not build. Pinned to x/crypto v0.49.0 rather than moving the builder to 1.26. That is the newest release whose own requirements leave go.mod at 1.25.9 and x/sys where it was. Changing the toolchain the image is built with belongs in its own change, not inside a dependency addition. go.mod now differs from v0.9.4 by the one crypto line and nothing else. bcrypt has not changed in any way that matters here across those releases. Checked by building the Dockerfile locally, which now succeeds. The resulting container serves /incidents/3 as the web UI and answers /api/me with a JSON 401. --- go.mod | 6 +++--- go.sum | 8 ++++---- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/go.mod b/go.mod index 40be8c7..fba4603 100644 --- a/go.mod +++ b/go.mod @@ -1,10 +1,10 @@ module git.ryuvia.com/niklas/terdut-server -go 1.26.0 +go 1.25.9 require ( github.com/go-chi/chi/v5 v5.2.5 - golang.org/x/crypto v0.57.0 + golang.org/x/crypto v0.49.0 modernc.org/sqlite v1.50.1 ) @@ -14,7 +14,7 @@ require ( github.com/mattn/go-isatty v0.0.20 // indirect github.com/ncruces/go-strftime v1.0.0 // indirect github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec // indirect - golang.org/x/sys v0.48.0 // indirect + golang.org/x/sys v0.42.0 // indirect modernc.org/libc v1.72.3 // indirect modernc.org/mathutil v1.7.1 // indirect modernc.org/memory v1.11.0 // indirect diff --git a/go.sum b/go.sum index a094dac..03a49e2 100644 --- a/go.sum +++ b/go.sum @@ -14,15 +14,15 @@ github.com/ncruces/go-strftime v1.0.0 h1:HMFp8mLCTPp341M/ZnA4qaf7ZlsbTc+miZjCLOF github.com/ncruces/go-strftime v1.0.0/go.mod h1:Fwc5htZGVVkseilnfgOVb9mKy6w1naJmn9CehxcKcls= github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec h1:W09IVJc94icq4NjY3clb7Lk8O1qJ8BdBEF8z0ibU0rE= github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec/go.mod h1:qqbHyh8v60DhA7CoWK5oRCqLrMHRGoxYCSS9EjAz6Eo= -golang.org/x/crypto v0.57.0 h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M= -golang.org/x/crypto v0.57.0/go.mod h1:Fdz0i5U6CoizGwLda9DttjSk6qlZo25zYNtR+ycvuZA= +golang.org/x/crypto v0.49.0 h1:+Ng2ULVvLHnJ/ZFEq4KdcDd/cfjrrjjNSXNzxg0Y4U4= +golang.org/x/crypto v0.49.0/go.mod h1:ErX4dUh2UM+CFYiXZRTcMpEcN8b/1gxEuv3nODoYtCA= golang.org/x/mod v0.33.0 h1:tHFzIWbBifEmbwtGz65eaWyGiGZatSrT9prnU8DbVL8= golang.org/x/mod v0.33.0/go.mod h1:swjeQEj+6r7fODbD2cqrnje9PnziFuw4bmLbBZFrQ5w= golang.org/x/sync v0.20.0 h1:e0PTpb7pjO8GAtTs2dQ6jYa5BWYlMuX047Dco/pItO4= golang.org/x/sync v0.20.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo= -golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= +golang.org/x/sys v0.42.0 h1:omrd2nAlyT5ESRdCLYdm3+fMfNFE/+Rf4bDIQImRJeo= +golang.org/x/sys v0.42.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/tools v0.42.0 h1:uNgphsn75Tdz5Ji2q36v/nsFSfR/9BRFvqhGBaJGd5k= golang.org/x/tools v0.42.0/go.mod h1:Ma6lCIwGZvHK6XtgbswSoWroEkhugApmsXyrUmBhfr0= modernc.org/cc/v4 v4.28.2 h1:3tQ0lf2ADtoby2EtSP+J7IE2SHwEJdP8ioR59wx7XpY=