From 8dbe5e30ce9b321a1452997a805fac310cd256eb Mon Sep 17 00:00:00 2001 From: Alexander Alten Date: Thu, 22 Oct 2026 09:37:42 +0200 Subject: [PATCH] Build with Go 1.26.10 for CVE-2026-111943 - go.mod: toolchain line set to the fixed Go version (go.mod) - Dockerfiles: golang base image pinned to the fixed patch release (deploy/Dockerfile) - CI: setup-go pinned to the fixed patch release (.github/workflows/ci.yml) --- .github/workflows/ci.yml | 4 ++-- deploy/Dockerfile | 2 +- go.mod | 2 ++ 3 files changed, 5 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 024115d..f504b9d 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,7 +17,7 @@ jobs: - uses: actions/setup-go@v7 with: - go-version: "1.26.x" + go-version: "1.26.10" - name: Check formatting run: make fmt-check @@ -50,7 +50,7 @@ jobs: - uses: actions/setup-go@v7 with: - go-version: "1.26.x" + go-version: "1.26.10" - name: Install govulncheck run: go install golang.org/x/vuln/cmd/govulncheck@latest diff --git a/deploy/Dockerfile b/deploy/Dockerfile index b7c6ee2..1a39147 100644 --- a/deploy/Dockerfile +++ b/deploy/Dockerfile @@ -4,7 +4,7 @@ # Multi-stage build for KafGraph # ─── Builder ───────────────────────────────────────────────────────────────── -FROM golang:1.26-alpine AS builder +FROM golang:1.26.10-alpine AS builder RUN apk add --no-cache git ca-certificates diff --git a/go.mod b/go.mod index adf1862..45e2854 100644 --- a/go.mod +++ b/go.mod @@ -2,6 +2,8 @@ module github.com/scalytics/kafgraph go 1.25.0 +toolchain go1.26.10 + require ( github.com/blevesearch/bleve/v2 v2.6.1 github.com/dgraph-io/badger/v4 v4.9.6