From 2d17648f3d59ec9f9adbb55a9f84b9e60da4670c Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 06:43:10 +0000 Subject: [PATCH 1/3] Bump Go toolchain to 1.25.13 to resolve stdlib Snyk vulnerabilities Co-Authored-By: shayan --- Dockerfile | 2 +- go.mod | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index a26f19a811..eba8c1a038 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.24.4-alpine AS build +FROM golang:1.25.13-alpine AS build ARG VERSION="dev" # Set the working directory diff --git a/go.mod b/go.mod index 4cc7682fde..6bbd6efd94 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/github/github-mcp-server -go 1.23.7 +go 1.25.13 require ( github.com/google/go-github/v72 v72.0.0 From 4a43e53634a90faa631e0023ed56217dabc5de97 Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 07:04:23 +0000 Subject: [PATCH 2/3] Bump golangci-lint to v2.5 (built with Go 1.25) for lint CI Co-Authored-By: shayan --- .github/workflows/lint.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index b40193e722..e47578aa66 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -20,4 +20,4 @@ jobs: - name: golangci-lint uses: golangci/golangci-lint-action@v8 with: - version: v2.1 + version: v2.5 From f8cf2a63c08c1caba94773962f1334a9608dda6b Mon Sep 17 00:00:00 2001 From: Devin AI <158243242+devin-ai-integration[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 07:05:35 +0000 Subject: [PATCH 3/3] Use go.mod toolchain in lint workflow to match golangci-lint build Co-Authored-By: shayan --- .github/workflows/lint.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index e47578aa66..ab22c13d47 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -16,7 +16,7 @@ jobs: - uses: actions/checkout@v4 - uses: actions/setup-go@v5 with: - go-version: stable + go-version-file: go.mod - name: golangci-lint uses: golangci/golangci-lint-action@v8 with: