Skip to content

build: address Go security findings#960

Merged
bupd merged 1 commit into
mainfrom
fix-vulnerability
May 26, 2026
Merged

build: address Go security findings#960
bupd merged 1 commit into
mainfrom
fix-vulnerability

Conversation

@bupd

@bupd bupd commented May 26, 2026

Copy link
Copy Markdown
Member

Description

  • Address Go standard library vulnerability findings by moving the module to the fixed Go patch version.

Type of Change

Please select the relevant type.

  • Bug fix
  • New feature
  • Refactor
  • Documentation update
  • Chore / maintenance

Changes

  • Update the root module Go version from 1.26.2 to 1.26.3 to pick up fixes for GO-2026-4971 and GO-2026-4918.

Testing

  • go test ./...
  • go run golang.org/x/vuln/cmd/govulncheck@latest ./...

@codecov

codecov Bot commented May 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 8.61%. Comparing base (60ad0bd) to head (e2cb741).
⚠️ Report is 180 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff            @@
##             main    #960      +/-   ##
=========================================
- Coverage   10.99%   8.61%   -2.38%     
=========================================
  Files         173     314     +141     
  Lines        8671   15743    +7072     
=========================================
+ Hits          953    1357     +404     
- Misses       7612   14260    +6648     
- Partials      106     126      +20     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@bupd bupd added the github_actions Pull requests that update GitHub Actions code label May 26, 2026
@bupd bupd force-pushed the fix-vulnerability branch from 93853ac to fd5ea88 Compare May 26, 2026 14:30
@bupd bupd changed the title build: address security findings build: address Go security findings May 26, 2026
Signed-off-by: Prasanth Baskar <bupdprasanth@gmail.com>
@bupd bupd force-pushed the fix-vulnerability branch from fd5ea88 to e2cb741 Compare May 26, 2026 14:32
@bupd bupd self-assigned this May 26, 2026
@bupd bupd added dependencies Pull requests that update a dependency file and removed github_actions Pull requests that update GitHub Actions code labels May 26, 2026
@bupd bupd merged commit f566d5b into main May 26, 2026
10 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant