ci: derive Go version from go.mod instead of 'stable' #397

Merged
argoyle merged 3 commits from fix/ci-go-version-from-gomod into main 2026-08-17 08:24:31 +00:00
3 Commits
Author SHA1 Message Date
argoyle b8b75bcf2b ci: derive Go version from go.mod instead of 'stable'
cron-checker / vulnerabilities (pull_request) Successful in 55s
cron-checker / test (pull_request) Successful in 1m2s
cron-checker / build (pull_request) Successful in 8m34s
actions/setup-go resolves 'stable' from the go-versions manifest, which lagged behind the go1.26.6 security release and installed the vulnerable go1.26.5. That both failed govulncheck and broke builds once go.mod required >= 1.26.6 (GOTOOLCHAIN=local).

Using go-version-file keeps CI on exactly the toolchain go.mod asks for, which Renovate already keeps current.
2026-08-17 09:17:03 +02:00
renovate 6258421a47 chore(deps): update golang docker tag to v1.26.6 (#394)
Unbound Release / Check Preconditions (push) Successful in 22s
Unbound Release / Create Tag (push) Skipped
Unbound Release / Create Release (push) Successful in 26s
cron-checker / test (push) Successful in 56s
Release / release (push) Successful in 1m7s
Unbound Release / Generate Changelog and Handle PR (push) Successful in 41s
cron-checker / vulnerabilities (push) Successful in 55s
cron-checker / build (push) Failing after 13m51s
2026-08-17 07:03:03 +00:00
renovate 989ecf4858 chore(deps): update go toolchain directive to v1.26.6 [security] (#395)
Unbound Release / Check Preconditions (push) Successful in 21s
Unbound Release / Create Release (push) Successful in 24s
cron-checker / test (push) Successful in 1m0s
Unbound Release / Create Tag (push) Skipped
Unbound Release / Generate Changelog and Handle PR (push) Successful in 52s
cron-checker / vulnerabilities (push) Successful in 55s
Release / release (push) Successful in 1m17s
cron-checker / build (push) Successful in 10m51s
2026-08-17 06:35:48 +00:00