From 3fba8e79ca8e8e1917f308c9e90b3dd227a6a5c7 Mon Sep 17 00:00:00 2001
From: Terastar-Paperclip <noreply@paperclip.ing>
Date: Mon, 2 Nov 2026 22:08:17 -0500
Subject: [PATCH] chore: bump go directive to 1.26.10 (clears reachable stdlib
 vulns)

govulncheck flagged 10 reachable stdlib vulnerabilities on the 1.26.8
toolchain (net/http and crypto/x509, reached via auth.Login /
http.Client.Do). Bumping the go directive to 1.26.10 lets setup-go
pull a patched toolchain in CI; no source changes needed. Same fix
pattern as quantcli/liftoff-export-cli#67.

Co-Authored-By: Paperclip <noreply@paperclip.ing>
---
 go.mod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 9b99cd1..62ffa38 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/quantcli/withings-export-cli
 
-go 1.26.8
+go 1.26.10
 
 require (
 	github.com/quantcli/common/compat v0.0.0-20260511001927-62c4c6634ff5