build: use Go 1.26.10 for the crypto/x509 fix (GO-2026-6809)

This commit is contained in:
esengine committed 2026-10-20 20:01:33 -07:00
1 parent 27b5b6bf6a
commit b0168f37dc
3 files changed
+4 -2

No files matched your search

+1 -1
View File
@@ -2,7 +2,7 @@ module reasonix/desktop
go 1.26.0
toolchain go1.26.9
toolchain go1.26.10
// The desktop tools are a nested module so their CGO build never touches the
// CLI's CGO_ENABLED=0 single-static-binary guarantee. The replace lets them
+1 -1
View File
@@ -2,7 +2,7 @@ module reasonix
go 1.26.0
toolchain go1.26.9
toolchain go1.26.10
require (
aead.dev/minisign v0.3.0
@@ -0,0 +1,2 @@
- 安全:构建改用 Go 1.26.10,修复标准库证书验证 crypto/x509 对已不再受信任的中间证书的处理(GO-2026-6809)。关联 #14034。
- Security: builds now use Go 1.26.10, which fixes how crypto/x509 certificate verification treats intermediate certificates that are no longer trusted (GO-2026-6809). Refs #14034.