Skip to content

chore(deps): upgrade to go 1.26.4 and bump golang.org/x/crypto#7

Open
cswn wants to merge 1 commit into
masterfrom
chore/update-go-1.26.4
Open

chore(deps): upgrade to go 1.26.4 and bump golang.org/x/crypto#7
cswn wants to merge 1 commit into
masterfrom
chore/update-go-1.26.4

Conversation

@cswn

@cswn cswn commented Jun 12, 2026

Copy link
Copy Markdown

Summary

  • Bumps Go toolchain from 1.26.1 to 1.26.4 in go.mod and Dockerfile
  • Upgrades golang.org/x/crypto v0.49.0 → v0.53.0 (fixes CVE-2026-46595, requires >= v0.52.0)
  • Also picks up golang.org/x/sys v0.42.0 → v0.46.0 (transitive)

🤖 Generated with Claude Code

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
@cswn cswn marked this pull request as ready for review June 12, 2026 14:47
@cswn cswn requested a review from a team as a code owner June 12, 2026 14:47
@Faaizz Faaizz requested a review from Copilot June 12, 2026 14:48

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the project’s Go toolchain and dependency set to pick up security fixes (notably in golang.org/x/crypto) and keep the container build aligned with go.mod.

Changes:

  • Bump Go toolchain version from 1.26.1 → 1.26.4 in go.mod.
  • Update the build image to golang:1.26.4-alpine in Dockerfile.
  • Bump golang.org/x/crypto and golang.org/x/sys versions in module files.

Reviewed changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File Description
go.mod Updates Go toolchain version and module dependency versions.
go.sum Refreshes checksums to match updated module versions.
Dockerfile Aligns builder image Go version with go.mod.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

4 participants