From 6ac12e4b9a77c1f6fbd2b92c1c220347cdd97f14 Mon Sep 17 00:00:00 2001
From: Aaron Longwell <a@adl.io>
Date: Sat, 24 Oct 2026 07:26:26 -0700
Subject: [PATCH 1/2] chore: raise Go floor to 1.26, bump x/time and CI actions

- go.mod: Go floor 1.21 -> 1.26 (required by golang.org/x/time v0.16.0)
- golang.org/x/time v0.10.0 -> v0.16.0 (closes dependabot #105)
- CI: actions/checkout v5->v7, actions/setup-go v6->v7,
  codecov/codecov-action v5->v7 (closes dependabot #103, #104, #106)
- CHANGELOG: [1.14.0] entry

rate.Limiter API (Every/NewLimiter/Wait) unchanged at v0.16.0;
no source changes needed.
---
 .github/workflows/ci.yml | 26 +++++++++++++-------------
 CHANGELOG.md             | 11 ++++++++++-
 go.mod                   |  4 ++--
 go.sum                   |  4 ++--
 4 files changed, 27 insertions(+), 18 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 71ed44b..c4e2a39 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -11,10 +11,10 @@ jobs:
     name: Format
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-go@v6
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         with:
-          go-version: '1.21'
+          go-version: '1.26'
       - name: Check formatting
         run: |
           unformatted=$(gofmt -l .)
@@ -28,33 +28,33 @@ jobs:
     name: Vet
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-go@v6
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         with:
-          go-version: '1.21'
+          go-version: '1.26'
       - run: go vet ./...
 
   build:
     name: Build
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-go@v6
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         with:
-          go-version: '1.21'
+          go-version: '1.26'
       - run: go build ./...
 
   test:
     name: Test + Coverage
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v5
-      - uses: actions/setup-go@v6
+      - uses: actions/checkout@v7
+      - uses: actions/setup-go@v7
         with:
-          go-version: '1.21'
+          go-version: '1.26'
       - name: Run tests with coverage
         run: go test -v -race -coverprofile=coverage.txt -covermode=atomic ./...
-      - uses: codecov/codecov-action@v5
+      - uses: codecov/codecov-action@v7
         with:
           files: coverage.txt
           token: ${{ secrets.CODECOV_TOKEN }}
diff --git a/CHANGELOG.md b/CHANGELOG.md
index 63213a1..af7fbf7 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -7,6 +7,14 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ## [Unreleased]
 
+## [1.14.0] - 2026-10-24
+
+### Changed
+
+- Raised minimum Go version to 1.26 (required by `golang.org/x/time` v0.16.0)
+- Bumped `golang.org/x/time` from v0.10.0 to v0.16.0
+- Bumped CI actions: `actions/checkout` v5→v7, `actions/setup-go` v6→v7, `codecov/codecov-action` v5→v7
+
 ## [1.13.0] - 2026-10-23
 
 ### Changed
@@ -22,5 +30,6 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 - Client context (cancellation and deadlines) is now honored on all request methods — GET, PUT, POST, multipart POST, and DELETE — not just GET. (#101)
 
-[Unreleased]: https://github.com/adlio/trello/compare/v1.13.0...HEAD
+[Unreleased]: https://github.com/adlio/trello/compare/v1.14.0...HEAD
+[1.14.0]: https://github.com/adlio/trello/compare/v1.13.0...v1.14.0
 [1.13.0]: https://github.com/adlio/trello/releases/tag/v1.13.0
diff --git a/go.mod b/go.mod
index 556c669..7a0d25e 100644
--- a/go.mod
+++ b/go.mod
@@ -1,5 +1,5 @@
 module github.com/adlio/trello
 
-go 1.21
+go 1.26
 
-require golang.org/x/time v0.10.0
+require golang.org/x/time v0.16.0
diff --git a/go.sum b/go.sum
index 781e1af..5176e7d 100644
--- a/go.sum
+++ b/go.sum
@@ -1,2 +1,2 @@
-golang.org/x/time v0.10.0 h1:3usCWA8tQn0L8+hFJQNgzpWbd89begxN66o1Ojdn5L4=
-golang.org/x/time v0.10.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM=
+golang.org/x/time v0.16.0 h1:vMb6ptszcQMkcwiRTAuNNU50gom6++Q/6gY2hDM6VDE=
+golang.org/x/time v0.16.0/go.mod h1:rVKOqvZeKvrDKTQiAHJ7wmwP0RzleSphoEA9RcdLA0s=

From 0dc55ccb3bd498d3b32081209da0b241058bf8bb Mon Sep 17 00:00:00 2001
From: Aaron Longwell <a@adl.io>
Date: Sat, 24 Oct 2026 07:27:40 -0700
Subject: [PATCH 2/2] fix: use go 1.26.0 patch form to match x/time's go
 directive

go mod tidy on Go 1.26 requires the main module's go directive to match
the full 1.x.y form that golang.org/x/time v0.16.0 declares (go 1.26.0).
---
 go.mod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index 7a0d25e..a09d5a1 100644
--- a/go.mod
+++ b/go.mod
@@ -1,5 +1,5 @@
 module github.com/adlio/trello
 
-go 1.26
+go 1.26.0
 
 require golang.org/x/time v0.16.0