From 19ebdb81d40c75862cf2f29a4765b81eef0b3b8a Mon Sep 17 00:00:00 2001 From: Amit Yadav Date: Fri, 4 Sep 2026 23:25:06 +0530 Subject: [PATCH] chore: bump go.mod directive to 1.26.7 (backplane-2.17) Aligns the declared Go minimum with the toolchain already resolved by the floating golang:1.26 builder tag in production builds, and closes coverage gaps for stdlib CVEs fixed in 1.26.6 and 1.26.7: - GO-2026-6218 (CVE-2026-56860) - GO-2026-6090 (CVE-2026-56862) - GO-2026-6089 (CVE-2026-56853) - GO-2026-6088 (CVE-2026-56859) - GO-2026-5972 (CVE-2026-33818) - GO-2026-5026 (CVE-2026-39821) - GO-2026-5038 (CVE-2026-42504) Verified with go build (-mod=readonly), go vet, and gofmt against a locally installed go1.26.7 toolchain. Signed-off-by: Amit Yadav Co-authored-by: Cursor --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 528985ca8..2ddb4e45d 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/stolostron/discovery -go 1.26.3 +go 1.26.7 require ( github.com/gin-gonic/gin v1.9.1