Skip to content

fix(ci): bump Go to 1.26.11 for GO-2026-6859 - #1300

Merged
carddev81 merged 1 commit into
mainfrom
chore/go-1.26.11
Nov 11, 2026
Merged

carddev81 merged 1 commit into
mainfrom
chore/go-1.26.11

Conversation

@CK-7vn

@CK-7vn CK-7vn commented Nov 11, 2026 •

Copy link
Copy Markdown
Member

Core go version bump due to new dependency security issues in recent git log.

@CK-7vn
CK-7vn requested a review from a team as a code owner November 11, 2026 18:38
@CK-7vn
CK-7vn requested review from corypride and removed request for a team November 11, 2026 18:38
@coderabbitai

coderabbitai Bot commented Nov 11, 2026 •

Copy link
Copy Markdown

Explain Change →

No actionable comments were generated in the recent review.

Summary

Summary by CodeRabbit

  • Chores
    • Updated the Go version used by automated testing, security checks, and backend modules to 1.26.11. This aligns the project’s development and validation environments on the same Go release. No application features or dependencies changed.

The test and security workflows and three Go modules now specify Go version 1.26.11 instead of 1.26.10.

Changes: Go version update

Layer / File(s) Summary
Update Go version declarations
.github/workflows/go_test.yml, .github/workflows/security-go.yml, backend/go.mod, backend/migrations/go.mod, backend/seeder/go.mod
The workflows and modules change their declared Go version from 1.26.10 to 1.26.11. No dependency changes are reported.
Merge Risk: Minimal · up to a0a3e

This updates the Go version to the release that fixes GO-2026-6859. Builds using the older bundled toolchain will automatically switch to the required patched version, so no merge-blocking risk is identified.

Pre-merge checks: Passed 5

Check name Status Explanation
Title check Passed The title clearly identifies the Go version bump and the related security issue. It accurately summarizes the main changes.
Description check Passed The description explains that the Go version was bumped because of dependency security issues. It is related to the changeset.
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (5 skipped: 5 unsupported.)

  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

Recent review info

Run configuration

  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: ASSERTIVE
  • Plan: Advanced
  • Run ID: 77d582d9-9435-4db6-a6c7-2c7a4d31581a
Commits

Reviewing files that changed from the base of the PR and between faa4193 and a0a3e7a.

Files ignored due to path filters: 1

  • go.work is excluded by !**/*.work
Files selected for processing: 5

  • .github/workflows/go_test.yml
  • .github/workflows/security-go.yml
  • backend/go.mod
  • backend/migrations/go.mod
  • backend/seeder/go.mod

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

@carddev81
carddev81 requested review from carddev81 and removed request for corypride November 11, 2026 18:41

@carddev81 carddev81 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@CK-7vn this is finsihed testing, it passed !! Good work!!

@carddev81
carddev81 merged commit 803848e into main Nov 11, 2026
14 checks passed
@carddev81
carddev81 deleted the chore/go-1.26.11 branch November 11, 2026 18:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants