Skip to content

fix: drop toolchain pin from state go.mod (unblocks v1.0.0 release)#166

Merged
joshua-temple merged 1 commit into
mainfrom
fix/state-drop-toolchain-pin
Jun 15, 2026
Merged

fix: drop toolchain pin from state go.mod (unblocks v1.0.0 release)#166
joshua-temple merged 1 commit into
mainfrom
fix/state-drop-toolchain-pin

Conversation

@joshua-temple

Copy link
Copy Markdown
Collaborator

What this change does

Removes the toolchain go1.26.4 directive from state/go.mod. The state module is standard-library-only and does not call the crypto/x509 / net/textproto advisories, so it never needed the pinned toolchain — but the directive forced a go1.26.4 toolchain, which breaks building state on its declared go 1.25 floor under GOTOOLCHAIN=local (as the release validation gate runs). The 1.25 matrix legs failed for this reason; the 1.26.4 legs passed.

Why

state supports Go 1.25; the toolchain pin contradicted that and blocked the v1.0.0 release validation. govulncheck stays clean for state regardless of toolchain (it does not call the affected stdlib paths).

Checklist

  • Commits signed off (DCO)
  • Conventional commit
  • state builds + tests + govulncheck clean

… floor

Signed-off-by: Joshua Temple <joshua.temple@stablekernel.com>
@joshua-temple joshua-temple merged commit 56f199a into main Jun 15, 2026
2 checks passed
@joshua-temple joshua-temple deleted the fix/state-drop-toolchain-pin branch June 15, 2026 15:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant