Skip to content

chore(deps): upgrade to go 1.26.4 and bump golang.org/x/crypto#7

Merged
cswn merged 1 commit into
masterfrom
chore/update-go-1.26.4
Jun 12, 2026
Merged

chore(deps): upgrade to go 1.26.4 and bump golang.org/x/crypto#7
cswn merged 1 commit into
masterfrom
chore/update-go-1.26.4

Conversation

@cswn

@cswn cswn commented Jun 12, 2026

Copy link
Copy Markdown

Summary

  • Bumps Go toolchain from 1.26.1 to 1.26.4 in go.mod and Dockerfile
  • Upgrades golang.org/x/crypto v0.49.0 → v0.53.0 (fixes CVE-2026-46595, requires >= v0.52.0)
  • Also picks up golang.org/x/sys v0.42.0 → v0.46.0 (transitive)

🤖 Generated with Claude Code

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@cswn cswn marked this pull request as ready for review June 12, 2026 14:47
@cswn cswn requested a review from a team as a code owner June 12, 2026 14:47
@Faaizz Faaizz requested a review from Copilot June 12, 2026 14:48

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the project’s Go toolchain and dependency set to pick up security fixes (notably in golang.org/x/crypto) and keep the container build aligned with go.mod.

Changes:

  • Bump Go toolchain version from 1.26.1 → 1.26.4 in go.mod.
  • Update the build image to golang:1.26.4-alpine in Dockerfile.
  • Bump golang.org/x/crypto and golang.org/x/sys versions in module files.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
go.mod Updates Go toolchain version and module dependency versions.
go.sum Refreshes checksums to match updated module versions.
Dockerfile Aligns builder image Go version with go.mod.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@cswn cswn merged commit 1b083b1 into master Jun 12, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

4 participants