chore: bump go.mod directive to 1.26.7 (backplane-2.17) - #2349
Conversation
Aligns the declared Go minimum with the toolchain already resolved by the floating golang:1.26 builder tag in production builds, and closes coverage gaps for stdlib CVEs fixed in 1.26.6 and 1.26.7: - GO-2026-6218 (CVE-2026-56860) - GO-2026-6090 (CVE-2026-56862) - GO-2026-6089 (CVE-2026-56853) - GO-2026-6088 (CVE-2026-56859) - GO-2026-5972 (CVE-2026-33818) - GO-2026-5026 (CVE-2026-39821) - GO-2026-5038 (CVE-2026-42504) Verified with go build (-mod=readonly), go vet, and gofmt against a locally installed go1.26.7 toolchain. Signed-off-by: Amit Yadav <ayadav@redhat.com> Co-authored-by: Cursor <cursoragent@cursor.com>
|
Important Review skippedAuto reviews are disabled on base/target branches other than the default branch. Please check the settings in the CodeRabbit UI or the ⚙️ Run configurationConfiguration used: Repository: stolostron/coderabbit/.coderabbit.yaml Review profile: CHILL Plan: Team Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
|
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: amitesh1201, dislbenn The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
01f5b21
into
stolostron:backplane-2.17
2 participants
Summary
Backport of the go.mod directive bump from stolostron/discovery#2346 for the
backplane-2.17branch.Updates
go.moddirective1.26.3→1.26.7to align the declared Go minimum with the toolchain resolved by the floatinggolang:1.26builder tag and close coverage gaps for stdlib CVEs.CVEs resolved by this change:
Test plan
go build -mod=readonly ./...go vet ./...gofmt -l .(no output)Made with Cursor