chore: bump Go toolchain to 1.26.5

govulncheck now fails every PR: GO-2026-5856 (crypto/tls Encrypted
Client Hello privacy leak) and GO-2026-4970 (os root escape via symlink
plus trailing slash) are found in go1.26.4 and fixed in go1.26.5. CI
resolves the toolchain from go-version-file: go.mod, so bumping the
toolchain directive in both modules moves every job to the fixed
release.

Co-Authored-By: Claude Fable 5 <[email protected]>
This commit is contained in:
SivanColaandClaude Fable 5 committed 2026-07-08 15:51:33 +00:00
1 parent 468249e89d
commit 990c1e33e9
2 files changed
+2 -2

No files matched your search

+1 -1
View File
@@ -2,7 +2,7 @@ module reasonix
go 1.25.0
toolchain go1.26.4
toolchain go1.26.5
require (
charm.land/bubbles/v2 v2.1.0