Skip to content

bump Go toolchain for CVE-2026-111943 - #178

Open
dogancanbakir wants to merge 2 commits into
mainfrom
fix/go-toolchain-cve
Open

dogancanbakir wants to merge 2 commits into
mainfrom
fix/go-toolchain-cve

Conversation

@dogancanbakir

@dogancanbakir dogancanbakir commented Oct 20, 2026 •

Copy link
Copy Markdown
Member

Fixes #177

Requires go 1.27.3 in go.mod (go install ignores toolchain) so builds include the CVE-2026-111943 fix (golang/go#82345).
Release workflow now reads the Go version from go.mod; the explicit go-version there overrode the toolchain line.

@dogancanbakir dogancanbakir self-assigned this Oct 20, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bump Go toolchain for CVE-2026-111943

1 participant