Skip to content

Commit e3599e6

Browse files
Lagojaclaude
Lagoja
and
claude
authored
Bump Go from 1.24.5 to 1.26.1 (#2819)
## Summary - Bumps Go from 1.24.5 to 1.26.1 to address 1 critical and 12 high-severity CVEs (fixes #2817) - Updates `flake.nix` to use `buildGo126Module` and refreshes `flake.lock` to latest nixpkgs-unstable - CI workflows auto-derive Go version from `go.mod`, so no workflow changes needed ## Test plan - [x] `go build ./...` passes - [x] `nix build` passes - [ ] CI tests pass 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 858d3a3 commit e3599e6

4 files changed

Lines changed: 48 additions & 48 deletions

File tree

‎devbox.lock‎

Lines changed: 43 additions & 43 deletions
Original file line numberDiff line numberDiff line change
@@ -2,174 +2,174 @@
22
"lockfile_version": "1",
33
"packages": {
44
"fd@latest": {
5-
"last_modified": "2025-07-28T17:09:23Z",
6-
"resolved": "github:NixOS/nixpkgs/648f70160c03151bc2121d179291337ad6bc564b#fd",
5+
"last_modified": "2026-03-21T07:29:51Z",
6+
"resolved": "github:NixOS/nixpkgs/09061f748ee21f68a089cd5d91ec1859cd93d0be#fd",
77
"source": "devbox-search",
8-
"version": "10.2.0",
8+
"version": "10.4.2",
99
"systems": {
1010
"aarch64-darwin": {
1111
"outputs": [
1212
{
1313
"name": "out",
14-
"path": "/nix/store/40nk6ri500aip6a34x8nnhr9k0ikgl8f-fd-10.2.0",
14+
"path": "/nix/store/b87vl0i1j3w760n2s6w30r2d69j89ags-fd-10.4.2",
1515
"default": true
1616
}
1717
],
18-
"store_path": "/nix/store/40nk6ri500aip6a34x8nnhr9k0ikgl8f-fd-10.2.0"
18+
"store_path": "/nix/store/b87vl0i1j3w760n2s6w30r2d69j89ags-fd-10.4.2"
1919
},
2020
"aarch64-linux": {
2121
"outputs": [
2222
{
2323
"name": "out",
24-
"path": "/nix/store/f0cm3mr35dxk6ziwcarwmk5psnzklg6k-fd-10.2.0",
24+
"path": "/nix/store/zxmq6kgqkl1zdyap0dskawvwah2sg6wy-fd-10.4.2",
2525
"default": true
2626
}
2727
],
28-
"store_path": "/nix/store/f0cm3mr35dxk6ziwcarwmk5psnzklg6k-fd-10.2.0"
28+
"store_path": "/nix/store/zxmq6kgqkl1zdyap0dskawvwah2sg6wy-fd-10.4.2"
2929
},
3030
"x86_64-darwin": {
3131
"outputs": [
3232
{
3333
"name": "out",
34-
"path": "/nix/store/5vqrgkgb3ishhjrjfvd08401bzj80yhl-fd-10.2.0",
34+
"path": "/nix/store/sclrbgh1hx86s6c3d6hl1lwxrrp33j3l-fd-10.4.2",
3535
"default": true
3636
}
3737
],
38-
"store_path": "/nix/store/5vqrgkgb3ishhjrjfvd08401bzj80yhl-fd-10.2.0"
38+
"store_path": "/nix/store/sclrbgh1hx86s6c3d6hl1lwxrrp33j3l-fd-10.4.2"
3939
},
4040
"x86_64-linux": {
4141
"outputs": [
4242
{
4343
"name": "out",
44-
"path": "/nix/store/d8gs5vih8f1nkck5q8jrndzxzdkpsl01-fd-10.2.0",
44+
"path": "/nix/store/836lndidk1144z81npf27c7dcgmczid3-fd-10.4.2",
4545
"default": true
4646
}
4747
],
48-
"store_path": "/nix/store/d8gs5vih8f1nkck5q8jrndzxzdkpsl01-fd-10.2.0"
48+
"store_path": "/nix/store/836lndidk1144z81npf27c7dcgmczid3-fd-10.4.2"
4949
}
5050
}
5151
},
5252
"git@latest": {
53-
"last_modified": "2025-07-28T17:09:23Z",
54-
"resolved": "github:NixOS/nixpkgs/648f70160c03151bc2121d179291337ad6bc564b#git",
53+
"last_modified": "2026-03-21T07:29:51Z",
54+
"resolved": "github:NixOS/nixpkgs/09061f748ee21f68a089cd5d91ec1859cd93d0be#git",
5555
"source": "devbox-search",
56-
"version": "2.50.1",
56+
"version": "2.53.0",
5757
"systems": {
5858
"aarch64-darwin": {
5959
"outputs": [
6060
{
6161
"name": "out",
62-
"path": "/nix/store/jn9byxgdjndngf0d2by0djg8gcdll7xc-git-2.50.1",
62+
"path": "/nix/store/6qbj40r0s289k5slmy8yna5x2hfz01wg-git-2.53.0",
6363
"default": true
6464
},
6565
{
6666
"name": "doc",
67-
"path": "/nix/store/j8djmq64ckbah7bl6jv1y6arrjr0shmv-git-2.50.1-doc"
67+
"path": "/nix/store/xp9w7bcl4c78268kn82qdayqglj0zdxa-git-2.53.0-doc"
6868
}
6969
],
70-
"store_path": "/nix/store/jn9byxgdjndngf0d2by0djg8gcdll7xc-git-2.50.1"
70+
"store_path": "/nix/store/6qbj40r0s289k5slmy8yna5x2hfz01wg-git-2.53.0"
7171
},
7272
"aarch64-linux": {
7373
"outputs": [
7474
{
7575
"name": "out",
76-
"path": "/nix/store/h4pvvix6pvnvys9a6y1xj2442r1ajdhl-git-2.50.1",
76+
"path": "/nix/store/0vbb6j0ppx1w8cw28h7w8s2dzla9j3m6-git-2.53.0",
7777
"default": true
7878
},
7979
{
8080
"name": "debug",
81-
"path": "/nix/store/rpxnrnsn4nbx8wm9d2vrgj0fr5xzz5lg-git-2.50.1-debug"
81+
"path": "/nix/store/gaj4q67pid2pcy9nvh2ysv4728wxj5m4-git-2.53.0-debug"
8282
},
8383
{
8484
"name": "doc",
85-
"path": "/nix/store/q8sicpx16gyzxnp3345a46lj4cz9wd09-git-2.50.1-doc"
85+
"path": "/nix/store/9mrg9g0w2b4cfdppq3n4zvhkvyixvqpx-git-2.53.0-doc"
8686
}
8787
],
88-
"store_path": "/nix/store/h4pvvix6pvnvys9a6y1xj2442r1ajdhl-git-2.50.1"
88+
"store_path": "/nix/store/0vbb6j0ppx1w8cw28h7w8s2dzla9j3m6-git-2.53.0"
8989
},
9090
"x86_64-darwin": {
9191
"outputs": [
9292
{
9393
"name": "out",
94-
"path": "/nix/store/8d1n8cvi5x1j0v61459lvhqs26vmcqbl-git-2.50.1",
94+
"path": "/nix/store/2q2hzaclp1rsj65h21lng7wa26vawhnq-git-2.53.0",
9595
"default": true
9696
},
9797
{
9898
"name": "doc",
99-
"path": "/nix/store/yn9cvbs7jz4dfdb17qralgr0ybi5rmjf-git-2.50.1-doc"
99+
"path": "/nix/store/yi2mi426la2x7rggv0a0ah11s2dangz4-git-2.53.0-doc"
100100
}
101101
],
102-
"store_path": "/nix/store/8d1n8cvi5x1j0v61459lvhqs26vmcqbl-git-2.50.1"
102+
"store_path": "/nix/store/2q2hzaclp1rsj65h21lng7wa26vawhnq-git-2.53.0"
103103
},
104104
"x86_64-linux": {
105105
"outputs": [
106106
{
107107
"name": "out",
108-
"path": "/nix/store/5i8zvall945kypmwgqd0y47f02pldwp4-git-2.50.1",
108+
"path": "/nix/store/7yvcckar1lzhqnr0xx2n19nsdjd4qa4d-git-2.53.0",
109109
"default": true
110110
},
111111
{
112-
"name": "doc",
113-
"path": "/nix/store/d2lhlzkdziwmijik8nszfwp8srbkskb9-git-2.50.1-doc"
112+
"name": "debug",
113+
"path": "/nix/store/9xs1n97fsdbgnk8cxbdx3hqlz6fdaynb-git-2.53.0-debug"
114114
},
115115
{
116-
"name": "debug",
117-
"path": "/nix/store/l46kpjpcwwp8l7kzzr1s2dlk646r73z2-git-2.50.1-debug"
116+
"name": "doc",
117+
"path": "/nix/store/rv7cz5lz1qmbdnh3zrpv0j0wa5ivaacq-git-2.53.0-doc"
118118
}
119119
],
120-
"store_path": "/nix/store/5i8zvall945kypmwgqd0y47f02pldwp4-git-2.50.1"
120+
"store_path": "/nix/store/7yvcckar1lzhqnr0xx2n19nsdjd4qa4d-git-2.53.0"
121121
}
122122
}
123123
},
124124
"github:NixOS/nixpkgs/nixpkgs-unstable": {
125-
"last_modified": "2025-08-12T09:17:37Z",
126-
"resolved": "github:NixOS/nixpkgs/372d9eeeafa5b15913201e2b92e8e539ac7c64d1?lastModified=1754990257&narHash=sha256-eEq2wlYNF2t89PsNyEv5Sz4lSxdukZCj4SdhZBVAGpI%3D"
125+
"last_modified": "2026-04-15T12:22:54Z",
126+
"resolved": "github:NixOS/nixpkgs/566acc07c54dc807f91625bb286cb9b321b5f42a?lastModified=1776255774&narHash=sha256-psVTpH6PK3q1htMJpmdz1hLF5pQgEshu7gQWgKO6t6Y%3D"
127127
},
128128
"go@latest": {
129-
"last_modified": "2026-01-23T17:20:52Z",
130-
"resolved": "github:NixOS/nixpkgs/a1bab9e494f5f4939442a57a58d0449a109593fe#go",
129+
"last_modified": "2026-03-21T07:29:51Z",
130+
"resolved": "github:NixOS/nixpkgs/09061f748ee21f68a089cd5d91ec1859cd93d0be#go",
131131
"source": "devbox-search",
132-
"version": "1.25.5",
132+
"version": "1.26.1",
133133
"systems": {
134134
"aarch64-darwin": {
135135
"outputs": [
136136
{
137137
"name": "out",
138-
"path": "/nix/store/wh88zz6r1ihcp2mm7ys1f2anp8aga6n2-go-1.25.5",
138+
"path": "/nix/store/kh43nhaz1qcpwws2xq805lrmwpmn9i3k-go-1.26.1",
139139
"default": true
140140
}
141141
],
142-
"store_path": "/nix/store/wh88zz6r1ihcp2mm7ys1f2anp8aga6n2-go-1.25.5"
142+
"store_path": "/nix/store/kh43nhaz1qcpwws2xq805lrmwpmn9i3k-go-1.26.1"
143143
},
144144
"aarch64-linux": {
145145
"outputs": [
146146
{
147147
"name": "out",
148-
"path": "/nix/store/k3knzdi0v21bf2m7vcxpdy1jnqg1h0zk-go-1.25.5",
148+
"path": "/nix/store/rz1pqbm5z3zfby250i0djfmfzzj7khg9-go-1.26.1",
149149
"default": true
150150
}
151151
],
152-
"store_path": "/nix/store/k3knzdi0v21bf2m7vcxpdy1jnqg1h0zk-go-1.25.5"
152+
"store_path": "/nix/store/rz1pqbm5z3zfby250i0djfmfzzj7khg9-go-1.26.1"
153153
},
154154
"x86_64-darwin": {
155155
"outputs": [
156156
{
157157
"name": "out",
158-
"path": "/nix/store/bwdahzajhqd5x14dbvkqww5f1wpsxif3-go-1.25.5",
158+
"path": "/nix/store/yv6jj27racylbfjw6a1cdr91ndxbgyf6-go-1.26.1",
159159
"default": true
160160
}
161161
],
162-
"store_path": "/nix/store/bwdahzajhqd5x14dbvkqww5f1wpsxif3-go-1.25.5"
162+
"store_path": "/nix/store/yv6jj27racylbfjw6a1cdr91ndxbgyf6-go-1.26.1"
163163
},
164164
"x86_64-linux": {
165165
"outputs": [
166166
{
167167
"name": "out",
168-
"path": "/nix/store/zzvsjgylnphvhms3lgr2qlwdxmc68z66-go-1.25.5",
168+
"path": "/nix/store/ckcq2mj8zk0drhaaacy6mp9d924hnr4m-go-1.26.1",
169169
"default": true
170170
}
171171
],
172-
"store_path": "/nix/store/zzvsjgylnphvhms3lgr2qlwdxmc68z66-go-1.25.5"
172+
"store_path": "/nix/store/ckcq2mj8zk0drhaaacy6mp9d924hnr4m-go-1.26.1"
173173
}
174174
}
175175
}

‎flake.lock‎

Lines changed: 3 additions & 3 deletions
Some generated files are not rendered by default. Learn more about customizing how changed files appear on GitHub.

‎flake.nix‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -27,7 +27,7 @@
2727
# Run `devbox run update-flake` to update the vendor-hash
2828
vendorHash = if builtins.pathExists ./vendor-hash then builtins.readFile ./vendor-hash else "";
2929

30-
buildGoModule = pkgs.buildGo125Module;
30+
buildGoModule = pkgs.buildGo126Module;
3131

3232
in
3333
{

‎go.mod‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
module go.jetify.com/devbox
22

3-
go 1.24.5
3+
go 1.26.1
44

55
require (
66
al.essio.dev/pkg/shellescape v1.6.0

0 commit comments

Comments
 (0)