[zzwong]

Add toolchain go1.26.10 to every Go module so CI and release builds use Go 1.26.10. Go 1.26.10 and 1.27.3 add a crypto/x509 distrust of the compromised eMudhra intermediate keys (CVE-2026-111943), which applies whatever root store the binary verifies against. Binaries built with earlier releases still accept certificates issued through those keys on Linux, where verification uses the system roots.

actions/setup-go uses the toolchain directive in preference to the go directive, so builds, tests and releases all pick it up. The go language version is unchanged.

Verification

GOTOOLCHAIN=go1.26.10 go build ./... passes for every module.

[monit-reviewer]

Automated PR Review

Reviewed commit: 5f48db7e6bda
Profile: claude-monit-reviewer - Posting as: monit-reviewer

Summary

Reviewer	Findings
automation:ci-deploy	0
security:code-auditor	0

Reviewer Coverage

• automation:ci-deploy — complete (broad); skipped: none; constraints: Could not verify that Go 1.26.10 exists or contains the stated crypto/x509 distrust; reviewed only the automation contract.
• security:code-auditor — complete (broad); skipped: none; constraints: Could not independently verify that go1.26.10 contains the CVE-2026-111943 crypto/x509 fix; relied on the PR description.

Inspected files (1)

• go.mod

0 PR discussion threads considered. 0 summarized; 0 resolved.

---

Completed in 3m 36s | ~$0.57 (est.) | claude-sonnet-5-5 | cr 0.10.325

Field	Value
Model	claude-sonnet-5-5
Reviewers	automation:ci-deploy, security:code-auditor
Engine	claude_cli · claude-sonnet-5-5
Reviewed by	cr · monit-reviewer
Duration	3m 36s wall · 4m 34s compute
Cost	~$0.57 (est.)
Pricing basis	baseline-2026-10-02/pricing
Tokens	26 in / 2.9k out

Per-workstream usage

• orchestrator-selection — claude-sonnet-5-5
  • In: 6
  • Out: 707
  • Cache read: 41.7k
  • Cache create: 33.8k
  • Cost: ~$0.15 (est.)
  • Duration: 52s
• automation:ci-deploy — claude-sonnet-5-5
  • In: 8
  • Out: 985
  • Cache read: 94.1k
  • Cache create: 20.4k
  • Cost: ~$0.11 (est.)
  • Duration: 1m 45s
• security:code-auditor — claude-sonnet-5-5
  • In: 8
  • Out: 908
  • Cache read: 94.3k
  • Cache create: 20.4k
  • Cost: ~$0.11 (est.)
  • Duration: 1m 21s
• orchestrator-rollup — claude-sonnet-5-5
  • In: 4
  • Out: 326
  • Cache read: 38.9k
  • Cache create: 48.1k
  • Cost: ~$0.20 (est.)
  • Duration: 33s