[CK-7vn]

Core go version bump due to new dependency security issues in recent git log.

[coderabbitai]

No actionable comments were generated in the recent review.

Summary

Summary by CodeRabbit

• Chores
  • Updated the Go version used by automated testing, security checks, and backend modules to 1.26.11. This aligns the project’s development and validation environments on the same Go release. No application features or dependencies changed.

The test and security workflows and three Go modules now specify Go version 1.26.11 instead of 1.26.10.

Changes: Go version update

Layer / File(s)	Summary
Update Go version declarations .github/workflows/go_test.yml, .github/workflows/security-go.yml, backend/go.mod, backend/migrations/go.mod, backend/seeder/go.mod	The workflows and modules change their declared Go version from 1.26.10 to 1.26.11. No dependency changes are reported.

Merge Risk: Minimal · up to a0a3e

This updates the Go version to the release that fixes GO-2026-6859. Builds using the older bundled toolchain will automatically switch to the required patched version, so no merge-blocking risk is identified.

Pre-merge checks: 5

Check name	Status	Explanation
Title check		The title clearly identifies the Go version bump and the related security issue. It accurately summarizes the main changes.
Description check		The description explains that the Go version was bumped because of dependency security issues. It is related to the changeset.
Docstring Coverage		No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (5 skipped: 5 unsupported.)

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: 77d582d9-9435-4db6-a6c7-2c7a4d31581a

Commits

Reviewing files that changed from the base of the PR and between faa4193 and a0a3e7a.

Files ignored due to path filters: 1

• go.work is excluded by !**/*.work

Files selected for processing: 5

• .github/workflows/go_test.yml
• .github/workflows/security-go.yml
• backend/go.mod
• backend/migrations/go.mod
• backend/seeder/go.mod

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

[carddev81]

@CK-7vn this is finsihed testing, it passed !! Good work!!