Skip to content

fix(ci): build and release on Go 1.26.9, the first toolchain with the net/http and crypto/tls fixes #60

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
protonspy merged 1 commit into from
Oct 18, 2026
Merged

fix(ci): build and release on Go 1.26.9, the first toolchain with the net/http and crypto/tls fixes #60

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 6 additions & 6 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,11 +35,11 @@ jobs:
# Build/test with a current, patched toolchain. Keep this pin AHEAD of
# go.mod's directive and do NOT switch to go-version-file: go.mod —
# install-compat with older toolchains rides on GOTOOLCHAIN=auto.
# Pinned to .13 for the GO-2026-6088 encoding/xml fix, which the pom
# reader reaches through xml.Unmarshal (.12 was the GO-2026-5856
# crypto/tls fix). The float '1.25' lags on hosted runners; float back
# once runners catch up.
go-version: '1.25.13'
# Pinned to 1.26.9: 1.25 is out of support, and GO-2026-6603..6617
# (net/http, net/textproto, crypto/tls) are fixed only from 1.26.9.
# Earlier pins: 1.25.13 for GO-2026-6088 encoding/xml, 1.25.12 for
# GO-2026-5856 crypto/tls.
go-version: '1.26.9'
cache: true

- name: go vet
Expand Down Expand Up @@ -74,7 +74,7 @@ jobs:

- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
with:
go-version: '1.25.13' # GO-2026-6088 encoding/xml fix; see the test job's note
go-version: '1.26.9' # see the test job's note
cache: true

- name: gofmt
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -96,7 +96,7 @@ jobs:

- uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
with:
go-version: '1.25.13' # see ci.yml's note before changing
go-version: '1.26.9' # see ci.yml's note before changing
cache: true

- name: Build & package
Expand Down
2 changes: 1 addition & 1 deletion docs/stack.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,7 @@ nobody recorded a reason, this file says so rather than inventing one.
## The module

- **Go 1.25** — `go.mod` declares `go 1.25.0`; CI pins the toolchain ahead of it at
`1.25.13`, deliberately, so `GOTOOLCHAIN=auto` still installs for older setups.
`1.26.9`, deliberately, so `GOTOOLCHAIN=auto` still installs for older setups.
Chosen for what the product is: one static binary, cross-compiled to six targets,
that an agent or a CI job can run with nothing installed underneath it.
- **The standard library, and nothing else** — `go.mod` has no `require` block at
Expand Down
Loading