From 155f2cbb912a302779595634dcaab51ac76ef932 Mon Sep 17 00:00:00 2001 From: Jacob Wan Date: Thu, 20 Aug 2026 11:44:30 -0700 Subject: [PATCH] build: bump Go to 1.26.7 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit go1.26.5 carries standard-library advisories fixed in 1.26.6, which the vulnerability scan reports on pull requests, on pushes to main, and weekly. This stops at 1.26.7 rather than 1.27.0 because the pinned golangci-lint is built against Go 1.26 and refuses a 1.27 target. Releases adding go1.27 support exist upstream, but mise's minimum_release_age holds them back as a supply-chain guard, so the pinned toolchain cannot adopt them yet — and the mise pin and the golangci-lint-action version input in ci.yml are one atomic value, so moving only the CI half would trade a red report for undetected local/CI drift. Revisit Go 1.27 once that release-age window passes. Until then the toolchain currency report stays red: it compares each pin against the latest release rather than against the latest patch of the pinned minor. mise.toml, go.mod, and mise.lock move together because nothing in CI detects a mismatch between them. Co-Authored-By: Claude Opus 5 (1M context) --- go.mod | 2 +- mise.lock | 30 +++++++++++++++--------------- mise.toml | 2 +- 3 files changed, 17 insertions(+), 17 deletions(-) diff --git a/go.mod b/go.mod index 64d9997..02e8cf9 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/jakewan/field-docket -go 1.26.5 +go 1.26.7 require ( github.com/goccy/go-yaml v1.19.2 diff --git a/mise.lock b/mise.lock index 2ae6fc6..6658be5 100644 --- a/mise.lock +++ b/mise.lock @@ -1,36 +1,36 @@ # @generated - this file is auto-generated by `mise lock` https://mise.jdx.dev/dev-tools/mise-lock.html [[tools.go]] -version = "1.26.5" +version = "1.26.7" backend = "core:go" [tools.go."platforms.linux-arm64"] -checksum = "sha256:fe4789e92b1f33358680864bbe8704289e7bb5fc207d80623c308935bd696d49" -url = "https://dl.google.com/go/go1.26.5.linux-arm64.tar.gz" +checksum = "sha256:5a4ec883379d51ee9ce1040d5e87f8d35e20387574dd8c947feb01eabc3c1b37" +url = "https://dl.google.com/go/go1.26.7.linux-arm64.tar.gz" [tools.go."platforms.linux-arm64-musl"] -checksum = "sha256:fe4789e92b1f33358680864bbe8704289e7bb5fc207d80623c308935bd696d49" -url = "https://dl.google.com/go/go1.26.5.linux-arm64.tar.gz" +checksum = "sha256:5a4ec883379d51ee9ce1040d5e87f8d35e20387574dd8c947feb01eabc3c1b37" +url = "https://dl.google.com/go/go1.26.7.linux-arm64.tar.gz" [tools.go."platforms.linux-x64"] -checksum = "sha256:5c2c3b16caefa1d968a94c1daca04a7ca301a496d9b086e17ad77bb81393f053" -url = "https://dl.google.com/go/go1.26.5.linux-amd64.tar.gz" +checksum = "sha256:ffb5f8de10c62550dfddab66b36b57030721e0a44a3218e9e1181d7b59f121ca" +url = "https://dl.google.com/go/go1.26.7.linux-amd64.tar.gz" [tools.go."platforms.linux-x64-musl"] -checksum = "sha256:5c2c3b16caefa1d968a94c1daca04a7ca301a496d9b086e17ad77bb81393f053" -url = "https://dl.google.com/go/go1.26.5.linux-amd64.tar.gz" +checksum = "sha256:ffb5f8de10c62550dfddab66b36b57030721e0a44a3218e9e1181d7b59f121ca" +url = "https://dl.google.com/go/go1.26.7.linux-amd64.tar.gz" [tools.go."platforms.macos-arm64"] -checksum = "sha256:efb87ff28af9a188d0536ef5d42e63dd52ba8263cd7344a993cc48dd11dedb6a" -url = "https://dl.google.com/go/go1.26.5.darwin-arm64.tar.gz" +checksum = "sha256:020a1e8224811be75163e920bc77e0926a1390a6aeea19bdcf23f74b9d749f6d" +url = "https://dl.google.com/go/go1.26.7.darwin-arm64.tar.gz" [tools.go."platforms.macos-x64"] -checksum = "sha256:6231d8d3b8f5552ec6cbf6d685bdd5482e1e703214b120e89b3bf0d7bf1ef725" -url = "https://dl.google.com/go/go1.26.5.darwin-amd64.tar.gz" +checksum = "sha256:92e8b34bff3c89ab16404c595669ac8cb004cc2f676dcbd1f5b87a6b8def3b47" +url = "https://dl.google.com/go/go1.26.7.darwin-amd64.tar.gz" [tools.go."platforms.windows-x64"] -checksum = "sha256:97e6b2a833b6d89f9ff17d25419ac0a7e3b482a044e9ab18cdef834bd834fd38" -url = "https://dl.google.com/go/go1.26.5.windows-amd64.zip" +checksum = "sha256:f4f534a486e4bc3387fa18f08208f2f854b7aaea8a08f2a2d829a914a05abb11" +url = "https://dl.google.com/go/go1.26.7.windows-amd64.zip" [[tools.golangci-lint]] version = "2.12.2" diff --git a/mise.toml b/mise.toml index 3521042..6e317dc 100644 --- a/mise.toml +++ b/mise.toml @@ -5,7 +5,7 @@ lockfile = true [tools] -go = "1.26.5" +go = "1.26.7" # The golangci-lint version is pinned identically here and in the CI workflow's # golangci-lint-action `version:` — treat them as one atomic value so local and # CI lint run the same binary against the same config schema.