Skip to content

bump Go toolchain for CVE-2026-111943 - #770

Open
dogancanbakir wants to merge 1 commit into
devfrom
fix/go-toolchain-cve
Open

dogancanbakir wants to merge 1 commit into
devfrom
fix/go-toolchain-cve

Conversation

@dogancanbakir

@dogancanbakir dogancanbakir commented Oct 20, 2026 •

Copy link
Copy Markdown
Member

Fixes #769

Requires go 1.26.10 in go.mod (go install ignores toolchain) so builds include the CVE-2026-111943 fix (golang/go#82345). Workflows now read the Go version from go.mod instead of pinning it.

@dogancanbakir dogancanbakir self-assigned this Oct 20, 2026
@dogancanbakir
dogancanbakir changed the base branch from main to dev October 22, 2026 05:26
@dogancanbakir dogancanbakir reopened this Oct 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

bump Go toolchain for CVE-2026-111943

1 participant