ci: bump the Go toolchain pin to 1.26.8 in go.mod and both workflow image digests (#473) #474

Merged
hexajon merged 1 commit from issue-473-ci-bump-the-go-toolchain-pin-to-1268-gomod-the-two into main 2026-09-09 22:01:08 +00:00
Owner

Summary

Closes #473. The three places move together, per docs/contributing/ci.md ("Bumping the Go patch release"):

  • go.mod: go 1.26.6 to go 1.26.8.
  • .forgejo/workflows/ci.yml (two jobs) and .forgejo/workflows/drift.yml (two jobs): docker.io/golang:1.26-trixie digest b75d466d... to 771f3162....
  • .forgejo/workflows/drift.yml (one job): docker.io/golang:1.26 digest 0d1d3a79... to 9d2f36f0....

Digest provenance: Docker Hub reports the same index digest for 1.26-trixie and 1.26.8-trixie (771f3162...), and for 1.26 and 1.26.8 (9d2f36f0...), both published 2026-09-02. So each pinned image bundles Go 1.26.8, which is what scripts/check-go-version.sh asserts against go.mod under GOTOOLCHAIN: local.

Why now: the local gate failed its first step (go-version) on a 1.26.8 host against a 1.26.6 go.mod while finishing #440. The host is not downgraded.

Gate: ./scripts/gate.sh full run passes: go-version, selfheal, build, gofmt, vet, gofix, modtidy, third-party-licenses, hook-tests, adr-check, test-race, staticcheck, govulncheck, gosec, modernize, docs-verify, cross-compile, mcp-conformance. go mod tidy -diff is empty.

Closes #473

## Summary Closes #473. The three places move together, per docs/contributing/ci.md ("Bumping the Go patch release"): - `go.mod`: `go 1.26.6` to `go 1.26.8`. - `.forgejo/workflows/ci.yml` (two jobs) and `.forgejo/workflows/drift.yml` (two jobs): `docker.io/golang:1.26-trixie` digest `b75d466d...` to `771f3162...`. - `.forgejo/workflows/drift.yml` (one job): `docker.io/golang:1.26` digest `0d1d3a79...` to `9d2f36f0...`. Digest provenance: Docker Hub reports the same index digest for `1.26-trixie` and `1.26.8-trixie` (`771f3162...`), and for `1.26` and `1.26.8` (`9d2f36f0...`), both published 2026-09-02. So each pinned image bundles Go 1.26.8, which is what `scripts/check-go-version.sh` asserts against go.mod under `GOTOOLCHAIN: local`. Why now: the local gate failed its first step (go-version) on a 1.26.8 host against a 1.26.6 go.mod while finishing #440. The host is not downgraded. Gate: `./scripts/gate.sh` full run passes: go-version, selfheal, build, gofmt, vet, gofix, modtidy, third-party-licenses, hook-tests, adr-check, test-race, staticcheck, govulncheck, gosec, modernize, docs-verify, cross-compile, mcp-conformance. `go mod tidy -diff` is empty. Closes #473
ci: bump the Go toolchain pin to 1.26.8 in go.mod and both workflow image digests (#473)
Some checks failed
ci / mcp-conformance (pull_request) Successful in 2m21s
drift / govulncheck (pull_request) Has been skipped
drift / surface-diff (pull_request) Successful in 1m23s
drift / forgejo-smoke (pull_request) Has been skipped
ci / mcp-conformance (push) Successful in 4s
drift / govulncheck (push) Has been skipped
drift / surface-diff (push) Successful in 9s
drift / forgejo-smoke (push) Has been skipped
ci / gate (pull_request) Successful in 33m23s
ci / gate (push) Failing after 30m28s
c747aad36c
Closes #473
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
sixfold-space/madtea!474
No description provided.