Skip to content

Bump Go toolchain to 1.25.11 - #2

Merged
mark-takada-airoa merged 1 commit into
mainfrom
fix-govulncheck-go-1.25.11
Jun 5, 2026
Merged

mark-takada-airoa merged 1 commit into
mainfrom
fix-govulncheck-go-1.25.11

Conversation

@mark-takada-airoa

@mark-takada-airoa mark-takada-airoa commented Jun 4, 2026 •

Copy link
Copy Markdown
Contributor

Description

  • Bump Go toolchain 1.25.10 → 1.25.11 in backend/Dockerfile, backend/Dockerfile.dev, .github/workflows/backend-lint.yml, .github/workflows/backend-test.yml.
  • Resolves govulncheck findings GO-2026-5037 (crypto/x509) and GO-2026-5039 (net/textproto), both fixed upstream in go1.25.11.
  • Aligns every Go toolchain reference on the same pinned patch version for reproducibility.

Detected by govulncheck on the backend-lint workflow run for
#feat/robot-type-combo-box: https://github.com/airoa-org/yubi-app/actions/runs/26923229914/job/79427901909?pr=1

Type of Change

  • 🐛 Bug fix (non-breaking change which fixes an issue)
  • ✨ New feature (non-breaking change which adds functionality)
  • 💥 Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • 📝 Documentation update
  • 🎨 Style/Refactoring (no functional changes)

How Has This Been Tested?

  • backend-lint workflow green (govulncheck step in particular)
  • backend-test workflow green

Checklist

  • Tests added/updated
  • Documentation updated
  • Self-reviewed
  • Ready for review

@petr-airoa petr-airoa left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mark-takada-airoa
mark-takada-airoa merged commit 75e0ea3 into main Jun 5, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants