Bump release toolchain to Go 1.26.3 to address stdlib CVEs in shipped binaries (#1004)

Copilot · web-flow · commit b663472803f3 · 2026-06-02T18:16:42.000+08:00
* Initial plan

* Apply remaining changes

---------

Co-authored-by: copilot-swe-agent[bot] &lt;198982749+Copilot@users.noreply.github.com&gt;
diff --git a/Dockerfile.release b/Dockerfile.release
@@ -1,4 +1,4 @@
-FROM golang:1.26.0
+FROM golang:1.26.3
 
 # See https://github.com/cli/cli/blob/trunk/docs/install_linux.md#debian-ubuntu-linux-raspberry-pi-os-apt
 # for the latest gh install instructions when the below didn't work
diff --git a/go.mod b/go.mod
@@ -1,6 +1,6 @@
 module github.com/databus23/helm-diff/v3
 
-go 1.26.0
+go 1.26.3
 
 require (
 	github.com/Masterminds/semver/v3 v3.5.0

Original file line number	Diff line number	Diff line change
`@@ -1,4 +1,4 @@`
`1`		`-FROM golang:1.26.0`
	`1`	`+FROM golang:1.26.3`
`2`	`2`
`3`	`3`	`# See https://github.com/cli/cli/blob/trunk/docs/install_linux.md#debian-ubuntu-linux-raspberry-pi-os-apt`
`4`	`4`	`# for the latest gh install instructions when the below didn't work`