From d5334b9bdb3504551076fcc8783b9ee870b4566e Mon Sep 17 00:00:00 2001 From: Alexander Alten Date: Thu, 22 Oct 2026 09:14:45 +0200 Subject: [PATCH] Build with Go 1.26.10 for CVE-2026-111943 - go.mod: toolchain line set to the fixed Go version (go.mod) - Dockerfiles: golang base image pinned to the fixed patch release (Dockerfile) - CI: setup-go pinned to the fixed patch release (.github/workflows/build-and-release.yml, .github/workflows/security.yml) --- .github/workflows/build-and-release.yml | 4 ++-- .github/workflows/security.yml | 2 +- Dockerfile | 2 +- go.mod | 2 ++ 4 files changed, 6 insertions(+), 4 deletions(-) diff --git a/.github/workflows/build-and-release.yml b/.github/workflows/build-and-release.yml index 3c611ec..bd6af27 100644 --- a/.github/workflows/build-and-release.yml +++ b/.github/workflows/build-and-release.yml @@ -21,7 +21,7 @@ jobs: - name: Set up Go uses: actions/setup-go@v7 with: - go-version: '1.26.x' + go-version: '1.26.10' - name: Download dependencies run: go mod download @@ -78,7 +78,7 @@ jobs: - name: Set up Go uses: actions/setup-go@v7 with: - go-version: '1.26.x' + go-version: '1.26.10' - name: Install cosign uses: sigstore/cosign-installer@v3 diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index f1ee7ae..657da38 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -17,7 +17,7 @@ jobs: - uses: actions/setup-go@v7 with: - go-version: '1.26.x' + go-version: '1.26.10' - name: Install govulncheck run: go install golang.org/x/vuln/cmd/govulncheck@latest diff --git a/Dockerfile b/Dockerfile index 651e98f..50ec529 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,5 +1,5 @@ # --- Build Stage --- -FROM golang:1.26-alpine AS builder +FROM golang:1.26.10-alpine AS builder WORKDIR /app diff --git a/go.mod b/go.mod index 68b79e8..b1b9614 100644 --- a/go.mod +++ b/go.mod @@ -2,6 +2,8 @@ module github.com/scalytics/kshark-core go 1.25.0 +toolchain go1.26.10 + require ( github.com/jackc/pgx/v5 v5.10.0 github.com/segmentio/kafka-go v0.4.51