chore: build with Go 1.27.3 for GO-2026-6809 #855

Merged
hexajon merged 1 commit from chore-go-1.27.3 into main 2026-10-21 02:37:32 +00:00
Owner

Summary

Go 1.27.3 fixes GO-2026-6809 in crypto/x509 (distrust of compromised intermediate certificates). govulncheck reached it through the self-update path, so every gate failed on 1.27.2.

  • go.mod moves to go 1.27.3.
  • The pinned golang:1.27-trixie image in ci.yml and drift.yml moves to the digest that ships 1.27.3.

./scripts/gate.sh passes on this tree, govulncheck included, and the pinned image reports go1.27.3.

## Summary Go 1.27.3 fixes GO-2026-6809 in `crypto/x509` (distrust of compromised intermediate certificates). govulncheck reached it through the self-update path, so every gate failed on 1.27.2. - `go.mod` moves to `go 1.27.3`. - The pinned `golang:1.27-trixie` image in `ci.yml` and `drift.yml` moves to the digest that ships 1.27.3. `./scripts/gate.sh` passes on this tree, govulncheck included, and the pinned image reports `go1.27.3`.
chore: build with Go 1.27.3 for GO-2026-6809
Some checks failed
drift / govulncheck (pull_request) Has been skipped
drift / forgejo-smoke (pull_request) Has been skipped
drift / surface-diff (pull_request) Successful in 1m15s
drift / govulncheck (push) Has been skipped
drift / surface-diff (push) Successful in -10s
drift / forgejo-smoke (push) Has been skipped
ci / gate (pull_request) Failing after 17m50s
ci / gate (push) Failing after 40m5s
5a07ecf18e
Sign in to join this conversation.
No reviewers
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
sixfold-space/madtea!855
No description provided.