Repository navigation
build(deps): go 行を 1.27.2 へ上げ、x/crypto v0.58.0 / x/term v0.47.0 へ更新 - #27
Merged
Merged
Conversation
前回固定した toolchain go1.26.6 の stdlib に、その後 12 件の advisory （net/http, net/textproto, crypto/tls, html/template, os。いずれも到達不能）が 公開された。Termux の golang パッケージが 1.27.2 に追いついたため、Termux 互換 のために go 行を据え置く理由が無くなり、go 行を 1.27.2 へ上げて toolchain 行を 削除した。これで go install 利用者も修正済み stdlib でしかビルドできない。 公式 golang イメージは GOTOOLCHAIN=local なので GitLab CI も golang:1.27 へ。 x/crypto / x/term は定期更新（該当 advisory なし）。 make check、make itest-all（admin / user 全 12 件 PASS）、govulncheck で 到達可能 0 件を Go 1.27.2 で確認。 Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KushbCbiTpnF9ejVACemds
Codex Review SummaryThis comment shows the latest Codex review activity on this pull request.
ℹ️ About Codex in GitHubYour team has set up Codex to review pull requests in this repo. Reviews are triggered when you
Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
go.modのgoディレクティブを 1.26.0 → 1.27.2 に上げ、toolchain go1.26.6行を削除golangパッケージが 1.27.2（2026-10-14 更新）に追いついたため、Termux 互換のための据え置きが不要に。go install利用者も修正済み stdlib でしかビルドできなくなるgolang.org/x/cryptov0.57.0 → v0.58.0、golang.org/x/termv0.46.0 → v0.47.0（定期更新、該当 advisory なし）golang:1.26→golang:1.27（公式イメージはGOTOOLCHAIN=localのため必須）go installに必要 Go 版を明記、CHANGELOG / LESSONS 更新Test plan
make check（Go 1.27.2）make itest-all（admin / user とも全 6 件 PASS、Go 1.27.2 と 1.26.9 の両方で実施）govulncheck ./...→ 到達可能 0 件（残るのは未使用の x/crypto/openpgp 非推奨告知 GO-2026-5932 のみ）🤖 Generated with Claude Code
https://claude.ai/code/session_01KushbCbiTpnF9ejVACemds