From e3df7d14e212b23ef67d8bd59e9c520c21811958 Mon Sep 17 00:00:00 2001
From: Eric Fitzgerald <github@efitz.net>
Date: Mon, 26 Oct 2026 21:32:10 -0400
Subject: [PATCH] fix(deps): bump Go toolchain to 1.27.3

go1.27.2's crypto/x509 carries GO-2026-6809, which govulncheck reports
as reachable (fixed in go1.27.3); the required Vulnerability Scan check
now fails on every PR. Raise the go.mod toolchain floor (CI reads it via
go-version-file) and keep Dockerfile.server-oracle's GO_VERSION in step.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MaywXeYsU9NkUvek9t59QP
---
 Dockerfile.server-oracle | 2 +-
 go.mod                   | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile.server-oracle b/Dockerfile.server-oracle
index 2789e9f2..0aa9dd20 100644
--- a/Dockerfile.server-oracle
+++ b/Dockerfile.server-oracle
@@ -74,7 +74,7 @@ ENV PKG_CONFIG_PATH=/usr/lib/oracle/23/client64/lib/pkgconfig
 # slower, and it makes the image build depend on reaching go.dev at build time.
 # .github/workflows/deps-bump.yml raises this ARG and the go.mod floor together.
 # Use TARGETARCH to download the correct architecture binary
-ARG GO_VERSION=1.27.2
+ARG GO_VERSION=1.27.3
 ARG TARGETARCH
 RUN GOARCH=$(echo ${TARGETARCH} | sed 's/amd64/amd64/;s/arm64/arm64/') && \
     curl -fsSL "https://go.dev/dl/go${GO_VERSION}.linux-${GOARCH}.tar.gz" -o /tmp/go.tar.gz && \
diff --git a/go.mod b/go.mod
index 8cd9479b..1b61a3e4 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/ericfitz/tmi
 
 go 1.26.2
 
-toolchain go1.27.2
+toolchain go1.27.3
 
 require (
 	github.com/DATA-DOG/go-sqlmock v1.5.2