Skip to content

build with Go 1.26.9 - #75

Merged
katbyte merged 1 commit into
mainfrom
kt/go-1.26.9
Oct 10, 2026
Merged

katbyte merged 1 commit into
mainfrom
kt/go-1.26.9

Conversation

@katbyte

@katbyte katbyte commented Oct 10, 2026

Copy link
Copy Markdown
Owner

The linter is now built with Go 1.26.9.

Why: Go 1.26.8 has three high-severity standard library advisories, so the binary scan on main is red and v0.12.0 would ship them. The linter does not link net/http or crypto/tls, where the three are, so it was never exposed. The scan goes by the Go version alone, and the released binary should pass it.

The Go version.

-1.26.8
+1.26.9

The changelog. One line under v0.12.0.

 - add rule `AZT008`: acceptance tests in a file not named after their resource's file ([#73](https://github.com/katbyte/azproviderlint/pull/73))
+- built with Go 1.26.9, which fixes CVE-2026-78667, CVE-2026-78669 and CVE-2026-97031

Things that are fine as they are. go.mod still says go 1.26.6, the minimum for anyone building from source. Main builds, vets and passes every test on 1.26.9.

@katbyte
katbyte merged commit 4f1b68f into main Oct 10, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant