Build with Go 1.26.10 for CVE-2026-111943

.github/workflows/build-and-release.yml

@@ -21,7 +21,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version: '1.26.x'
+          go-version: '1.26.10'
 
       - name: Download dependencies
         run: go mod download
@@ -78,7 +78,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version: '1.26.x'
+          go-version: '1.26.10'
 
       - name: Install cosign
         uses: sigstore/cosign-installer@v3

.github/workflows/security.yml

@@ -17,7 +17,7 @@ jobs:
 
       - uses: actions/setup-go@v7
         with:
-          go-version: '1.26.x'
+          go-version: '1.26.10'
 
       - name: Install govulncheck
         run: go install golang.org/x/vuln/cmd/govulncheck@latest

Dockerfile

@@ -1,5 +1,5 @@
 # --- Build Stage ---
-FROM golang:1.26-alpine AS builder
+FROM golang:1.26.10-alpine AS builder
 
 WORKDIR /app
 

go.mod

@@ -2,6 +2,8 @@ module github.com/scalytics/kshark-core
 
 go 1.25.0
 
+toolchain go1.26.10
+
 require (
 	github.com/jackc/pgx/v5 v5.10.0
 	github.com/segmentio/kafka-go v0.4.51