From 53a8f448742d9d926c455f8c4986d9e294a9d3c2 Mon Sep 17 00:00:00 2001
From: Mathieu Champlon <mathieu.champlon@docker.com>
Date: Wed, 21 Oct 2026 10:05:12 +0200
Subject: [PATCH] chore(go): 1.26.10

Go 1.26.10 and 1.27.3 distrust the compromised eMudhra intermediates,
1.25 does not get the fix.

The go directive in go.mod moves with it. It was lowered to 1.25.8 so
Docker Desktop could import the module, but Docker Desktop is on 1.27
now. go.mod, .versions and the Dockerfile defaults agree again, the
latter two exactly as make validate-versions requires.
---
 .versions          | 2 +-
 Dockerfile         | 2 +-
 cmd/cli/Dockerfile | 2 +-
 go.mod             | 2 +-
 4 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.versions b/.versions
index e133550f7..6ba5e805d 100644
--- a/.versions
+++ b/.versions
@@ -1,4 +1,4 @@
-GO_VERSION=1.25
+GO_VERSION=1.26.10
 GOLANGCI_LINT_VERSION=v2.12.2
 VLLM_VERSION=0.19.1
 VLLM_UPSTREAM_VERSION=0.19.0
diff --git a/Dockerfile b/Dockerfile
index 62c8c0809..d9b7048e8 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-ARG GO_VERSION=1.25
+ARG GO_VERSION=1.26.10
 ARG LLAMA_SERVER_VERSION=b9879
 ARG LLAMA_SERVER_VARIANT=cpu
 ARG LLAMA_UPSTREAM_IMAGE=ghcr.io/ggml-org/llama.cpp:server-vulkan-b9879
diff --git a/cmd/cli/Dockerfile b/cmd/cli/Dockerfile
index 84a1be617..2f3b0d596 100644
--- a/cmd/cli/Dockerfile
+++ b/cmd/cli/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-ARG GO_VERSION=1.25
+ARG GO_VERSION=1.26.10
 ARG ALPINE_VERSION=3.23
 
 ARG DOCS_FORMATS="md,yaml"
diff --git a/go.mod b/go.mod
index 7250d2ed3..9b60a3080 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/docker/model-runner
 
-go 1.25.8
+go 1.26.10
 
 require (
 	github.com/charmbracelet/glamour v1.0.0