Main red: go:vuln GO-2026-6859 on go1.27.3 (RIG-9671) #72

Activity

1. rigel-mintaka commented on Nov 11, 2026

   

   rigel-mintaka

   on Nov 11, 2026

   ContributorAuthor

   More actions

   Evidence that main is red at current head 9159b476 (chore: release main #61).

   The pre-push gate ran on meissa#73, which is main plus one non-Go file (docs-bundle.toml). The run was on VM 18 at 2026-11-11 ~13:55Z, rjc log run-2159788415:

   go:vuln | Vulnerability #1: GO-2026-6859
   go:vuln |     Found in: net/http@go1.27.3
   go:vuln |     Fixed in: net/http@go1.27.4
   go:vuln | Your code is affected by 1 vulnerability from the Go standard library.
     x Task go:vuln failed to run.
     -> Process govulncheck failed: exit code 3
   

   The affected traces are in internal/codeshape and internal/renovatehashes, both untouched by #73. Main CI last passed on 11-10 03:05, before this advisory was published.