From fb9b70fb5b875a0b5481b26e929759534178e72d Mon Sep 17 00:00:00 2001 From: John Sabath Date: Wed, 19 Aug 2026 16:20:35 -0700 Subject: [PATCH] Bump the Go toolchain to 1.26.7 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit govulncheck gates CI on reachable vulnerabilities, and four now fire — all in the Go standard library, all fixed in go1.26.6: GO-2026-6218 (net/url), GO-2026-6090 (crypto/tls), GO-2026-5972 (encoding/asn1), GO-2026-5026 (net/http idna). Move both the .go-version pin and go.mod's go directive to 1.26.7. mise resolves the toolchain from go.mod first, and "mise run deps" guards that the two agree, so both must move together. Signed-off-by: John Sabath --- .go-version | 2 +- go.mod | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.go-version b/.go-version index 8fe00a5..ad7c780 100644 --- a/.go-version +++ b/.go-version @@ -1 +1 @@ -1.26.5 +1.26.7 diff --git a/go.mod b/go.mod index dcf7ef3..7fdf895 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/reactor-team/semantic -go 1.26.5 +go 1.26.7 require ( github.com/alecthomas/kong v1.16.0