From 31a7933f470f4127a63b2bb70be7f95b2a9792df Mon Sep 17 00:00:00 2001 From: Terastar-Paperclip Date: Mon, 2 Nov 2026 22:06:15 -0500 Subject: [PATCH] chore: bump go directive to 1.26.10 (clears reachable stdlib vulns) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit govulncheck on the security workflow was flagging GO-2026-6809 (crypto/x509), GO-2026-6617 (net/http), and GO-2026-6613 — all reached via auth.Login / http.Client.Do and all fixed in the Go 1.26.9/1.26.10 stdlib. Bumping the go directive lets setup-go pull a patched toolchain in CI; no source changes needed. Same fix pattern as #47/#62. Co-Authored-By: Paperclip --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index caa01ca..af8224f 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/quantcli/liftoff-export-cli -go 1.26.8 +go 1.26.10 require ( github.com/quantcli/common/compat v0.0.0-20260519113336-de9219e03369