Build with Go 1.26.8
The first release run stopped at govulncheck: go.mod named 1.26.5, so the workflow built with it, and 1.26.5 carries four standard-library vulnerabilities the tool reaches (net/url GO-2026-6218, crypto/tls GO-2026-6090, encoding/asn1 GO-2026-5972, net/http GO-2026-5026), all fixed in 1.26.6. 1.26.8 is the current patch release; govulncheck is clean on it, and it is also the minimum for building from source.
This commit is contained in: