go 1.27.2: fix the standard library vulnerabilities govulncheck reports #19

Merged

jcoffey-dev merged 3 commits from fix/go-1.27.2 into main 2026-10-09 21:39:20 +00:00

Conversation 0 Commits 3 Files Changed 4

+11 -8

3 Commits

Author	SHA1	Message	Date
jcoffey-dev	d471bbcd9b	Merge remote-tracking branch 'origin/build/base-images-from-mirror-gcr' into fix/go-1.27.2	2026-10-09 14:37:35 -07:00
jcoffey-dev	8660eed25e	build: pull base images through mirror.gcr.io ... GitHub's shared runners keep hitting Docker Hub's anonymous pull limit (429 on node, alpine), failing docker-build on every PR and blocking the release build. mirror.gcr.io serves the same official images (digests checked against Docker Hub on 2026-10-09) without that limit.	2026-10-09 14:34:27 -07:00
jcoffey-dev	4558125832	go 1.27.2: fix the standard library vulnerabilities govulncheck reports ... govulncheck fails CI on main: net/http, net/http/internal/http2, crypto/tls and net/textproto advisories (GO-2026-6607 to GO-2026-6617) fixed in go1.27.2. Also golang.org/x/net v0.58.0 -> v0.60.0 (same advisories in its http2). The Gitea job image digest moves to the current golang tag, which is 1.27.2, so a Gitea build uses the same toolchain as GitHub's go-version-file.	2026-10-09 14:03:07 -07:00