lukaszraczylo/graphql-monitoring-proxy
1
0
Fork 0
mirror of https://github.com/lukaszraczylo/graphql-monitoring-proxy.git synced 2026-10-16 06:07:54 +00:00
Code Issues Packages Projects Releases Wiki Activity
531 Commits 5 Branches 399 Tags
d32f8f2be5fcb57e556ea3fdb9dd651507a5069e
Commit Graph
9 Commits
Author SHA1 Message Date
lukaszraczylo 4a68dcb00a fix(build): pin Go toolchain to 1.26.6 for standard-library CVE fixes 
Builds used the go1.26.5 toolchain, whose standard library contained seven vulnerabilities that govulncheck reported as reachable (GO-2026-6218, GO-2026-6091, GO-2026-6090, GO-2026-6089, GO-2026-6088, GO-2026-5972, GO-2026-5026). This change pins the module toolchain to go1.26.6 and sets the CI Go version to 1.26.6, so every build compiles against the patched standard library. After the bump govulncheck reports zero vulnerabilities affecting the code. The go language directive stays at 1.25.0, so no language behaviour changes.
 2026-08-17 19:45:26 +01:00
lukaszraczylo 1bff79e4f4 ci: also bump benchmark job Go to 1.25 2026-05-22 23:37:46 +01:00
lukaszraczylo b6e83f2837 ci: bump release Go to 1.25 to match go.mod directive 
The repo's go.mod has required go 1.25.0 since the perf+coverage pass,
but the release workflow still pinned setup-go to 1.24 — the latest
1.24.X tool refuses to compile a 1.25 module with GOTOOLCHAIN=local,
breaking auto-release on every push.
 2026-05-22 23:36:44 +01:00
lukaszraczylo c0f5f0830d Add signing of the builds 2025-12-15 00:42:45 +00:00
lukaszraczylo 9678b8f7b9 fixup! fixup! fixup! Github pages + benchmarks. 2025-12-07 17:00:33 +00:00
lukaszraczylo 7bb76893f5 fixup! fixup! Github pages + benchmarks. 2025-12-07 16:53:54 +00:00
lukaszraczylo 4ef42e5781 fixup! Github pages + benchmarks. 2025-12-07 16:49:50 +00:00
lukaszraczylo 996d29b57b Github pages + benchmarks. 2025-12-07 16:46:13 +00:00
lukaszraczylo 31fc3ae3d9 Switch to goreleaser. 2025-12-07 16:13:33 +00:00