From 2f93c95ac1fa3f475f8ffbb3aea25c43473a1bda Mon Sep 17 00:00:00 2001 From: Yvonne Devlin Date: Wed, 21 Oct 2026 14:10:55 +0000 Subject: [PATCH] fix: resolve Build and Test CI failure govulncheck failed on main after advisory GO-2026-6809 (Distrust compromised intermediate certificates in crypto/x509) was published. The vulnerable stdlib code is reachable under the go1.26.9 toolchain pinned in go.mod; the fix ships in go1.26.10. Bumps the go directive from 1.26.9 to 1.26.10. CI picks the toolchain from go.mod via go-version-file, so no workflow change is needed. Verified locally: govulncheck at the same pinned commit CI uses reports no vulnerabilities, and go build/vet pass under go1.26.10. Follows the precedent of #131. This failure was pre-existing on main and unrelated to PR #138. Assisted-by: Qwen3.8-27B-FP8 Signed-off-by: Yvonne Devlin --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 696cda3..9483b00 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/unbound-force/replicator -go 1.26.9 +go 1.26.10 require ( github.com/charmbracelet/lipgloss v1.1.0