From 989ecf485831f0ffd2782538ce3071a865e82969 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 17 Aug 2026 06:35:48 +0000 Subject: [PATCH 1/3] chore(deps): update go toolchain directive to v1.26.6 [security] (#395) --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index f66010f..e4f0f01 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module gitlab.com/unboundsoftware/cron-checker go 1.26.0 -toolchain go1.26.5 +toolchain go1.26.6 require ( github.com/alecthomas/kingpin/v2 v2.4.0 -- 2.54.0 From 6258421a470f756de0e369f47278dc42980cb085 Mon Sep 17 00:00:00 2001 From: Renovate Bot Date: Mon, 17 Aug 2026 07:03:03 +0000 Subject: [PATCH 2/3] chore(deps): update golang docker tag to v1.26.6 (#394) --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index b4378dc..64013a4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM amd64/golang:1.26.5@sha256:e8ab809ec169291532860acdcd50d5b43a9fcea3c4f381226c5cdc4254ad8ecc as build +FROM amd64/golang:1.26.6@sha256:9262b44222fad4e87aacd26b766bc1d9dddb7ea7b1bcad03bdce0f9c7f87f2bd as build WORKDIR /build ENV CGO_ENABLED=0 ADD . /build -- 2.54.0 From b8b75bcf2b2c7bcb5368cfa56d389749b8d4242b Mon Sep 17 00:00:00 2001 From: Joakim Olsson Date: Mon, 17 Aug 2026 08:24:17 +0200 Subject: [PATCH 3/3] ci: derive Go version from go.mod instead of 'stable' actions/setup-go resolves 'stable' from the go-versions manifest, which lagged behind the go1.26.6 security release and installed the vulnerable go1.26.5. That both failed govulncheck and broke builds once go.mod required >= 1.26.6 (GOTOOLCHAIN=local). Using go-version-file keeps CI on exactly the toolchain go.mod asks for, which Renovate already keeps current. --- .gitea/workflows/ci.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.gitea/workflows/ci.yaml b/.gitea/workflows/ci.yaml index e4264ad..7728d3c 100644 --- a/.gitea/workflows/ci.yaml +++ b/.gitea/workflows/ci.yaml @@ -14,7 +14,7 @@ jobs: - uses: actions/checkout@v7 - uses: actions/setup-go@v7 with: - go-version: 'stable' + go-version-file: go.mod - name: Run tests run: go test -race -coverprofile=coverage.txt ./... @@ -24,7 +24,7 @@ jobs: - uses: actions/checkout@v7 - uses: actions/setup-go@v7 with: - go-version: 'stable' + go-version-file: go.mod - name: Check vulnerabilities run: | go install golang.org/x/vuln/cmd/govulncheck@latest -- 2.54.0