From dc3203252079994a3c83874a2a465f065d1f6522 Mon Sep 17 00:00:00 2001
From: John Coffey <john@coffeylabs.org>
Date: Mon, 26 Oct 2026 23:54:51 -0700
Subject: [PATCH] Build with Go 1.26.10 for GO-2026-6809

govulncheck reports GO-2026-6809 (crypto/x509 distrusting compromised
intermediates) reachable from backup verification on Go 1.26.9; 1.26.10 fixes
it. go.mod drives the GitHub runners; the Gitea fallback image is re-pinned to
the 1.26-bookworm digest that ships 1.26.10.
---
 .gitea/workflows/ci.yml | 6 +++---
 go.mod                  | 2 +-
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/.gitea/workflows/ci.yml b/.gitea/workflows/ci.yml
index 25bf49b..313452a 100644
--- a/.gitea/workflows/ci.yml
+++ b/.gitea/workflows/ci.yml
@@ -38,7 +38,7 @@ jobs:
     if: ${{ vars.BUILD_ON != 'github' }}
     runs-on: light
     container:
-      image: golang:1.26-bookworm@sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c # 1.26-bookworm
+      image: golang:1.26-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af # 1.26-bookworm
     steps:
       - uses: coffey-labs/actions/checkout@fab0c4d45e0162963965f1555df27b7bed5e20ec
       - run: go vet ./...
@@ -53,7 +53,7 @@ jobs:
     needs: [test]
     runs-on: light
     container:
-      image: golang:1.26-bookworm@sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c # 1.26-bookworm
+      image: golang:1.26-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af # 1.26-bookworm
     steps:
       # Full history: the ancestry check below cannot be answered from a
       # shallow clone. The checkout also fetches every branch as origin/*.
@@ -119,7 +119,7 @@ jobs:
     runs-on: wait
     timeout-minutes: 150
     container:
-      image: golang:1.26-bookworm@sha256:d9c68c2c51161e12fd77e4c6320687c9cd86e1af1e3ad6e6cd63ff970641453c # 1.26-bookworm
+      image: golang:1.26-bookworm@sha256:632dff7351799a5a9954a48dc06670ade72ee44e8c351cdc0e5a57af2fea21af # 1.26-bookworm
     steps:
       - shell: bash
         env:
diff --git a/go.mod b/go.mod
index a68f734..dcdcdd3 100644
--- a/go.mod
+++ b/go.mod
@@ -1,3 +1,3 @@
 module github.com/Coffey-Labs/stalwart-migrator
 
-go 1.26.9
+go 1.26.10
-- 
2.54.0