From f556ef1e3f3f51ca03f03a0a4d2f088657c2dea9 Mon Sep 17 00:00:00 2001 From: "tozuo-home-cluster-eso[bot]" <287217661+tozuo-home-cluster-eso[bot]@users.noreply.github.com> Date: Tue, 13 Oct 2026 08:42:48 +0000 Subject: [PATCH] fix(deps): bump go directive to 1.26.9 to fix govulncheck stdlib findings Security Scan's govulncheck reports GO-2026-6603, GO-2026-6605, GO-2026-6607, GO-2026-6608 and GO-2026-6610 as called vulnerabilities in the Go standard library (net/http, net/textproto, crypto/tls). They are fixed in Go 1.26.9. Bump the go directive from 1.26.8 to 1.26.9 so the CI toolchain is at least the patched version. --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index e2b7173..ec47921 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/lukaszraczylo/harness-sync -go 1.26.8 +go 1.26.9 require ( charm.land/huh/v2 v2.0.3