From d40037b5da1b0d0f6c69c8b346c8edcd4c2e6df1 Mon Sep 17 00:00:00 2001 From: Terastar-Paperclip Date: Mon, 2 Nov 2026 22:07:31 -0500 Subject: [PATCH] chore: bump go directive to 1.26.10 (clears reachable stdlib vulns) govulncheck flagged 10 reachable stdlib vulnerabilities on the 1.26.8 toolchain (net/http and crypto/x509, reached via cronoapi.Client and cmd.Execute). Bumping the go directive to 1.26.10 lets setup-go pull a patched toolchain in CI; no source changes needed. Same fix pattern as quantcli/liftoff-export-cli#67. Co-Authored-By: Paperclip --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 8d0c9f4..614d4be 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/quantcli/crono-export-cli -go 1.26.8 +go 1.26.10 require ( github.com/quantcli/common/compat v0.0.0-20260511224412-1cf4a39648c5