Skip to content

build(deps): bump Go to 1.27.0 (toolchain go1.27.3), update deps, and add govulncheck action - #178

Merged
mhutchinson merged 1 commit into
transparency-dev:mainfrom
mhutchinson:build/govulncheck-and-deps
Nov 3, 2026
Merged

mhutchinson merged 1 commit into
transparency-dev:mainfrom
mhutchinson:build/govulncheck-and-deps

Conversation

@mhutchinson

Copy link
Copy Markdown
Contributor

Summary

  • Set go 1.27.0 and toolchain go1.27.3 in go.mod, and update the test matrix in .github/workflows/go_test.yml to 1.27.x to resolve standard library vulnerabilities.
  • Bump golang.org/x/net to v0.62.0.
  • Bump filippo.io/sunlight to v0.10.2 and filippo.io/torchwood to v0.10.1-0.20261024135344-1c05157b1fd2.
  • Add .github/workflows/govulncheck.yml matching transparency-dev/tessera.

@mhutchinson
mhutchinson force-pushed the build/govulncheck-and-deps branch from a77d1e8 to 28252bc Compare November 3, 2026 10:33
@mhutchinson
mhutchinson requested a review from AlCutter November 3, 2026 10:36
@mhutchinson

Copy link
Copy Markdown
Contributor Author

I'll switch the repo rules over to 1.27.x required instead of 1.26.x after this PR is approved.

@mhutchinson
mhutchinson merged commit cedafe4 into transparency-dev:main Nov 3, 2026
12 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants