From 1111a4cab5fb459aec8cb4ed61fc07b9e594e85e Mon Sep 17 00:00:00 2001 From: Carlos Herrero Date: Mon, 13 Jul 2026 15:06:06 +0200 Subject: [PATCH] security: bump Go to 1.26.5 to fix stdlib vulnerabilities Addresses 1 standard-library vulnerability reported by govulncheck in go1.26.4: GO-2026-5856 (crypto/tls), reachable via proxy.Server.Start and fixed in go1.26.5. Bumps all modules and the workspace: go.mod, sdk/go.mod, plugins/contrib/go.mod, plugins/contrib/microsoft/keyvault/go.mod, admin/go.mod, go.work. Co-Authored-By: Claude Opus 4.8 --- admin/go.mod | 2 +- go.mod | 2 +- go.work | 2 +- plugins/contrib/go.mod | 2 +- plugins/contrib/microsoft/keyvault/go.mod | 2 +- sdk/go.mod | 2 +- 6 files changed, 6 insertions(+), 6 deletions(-) diff --git a/admin/go.mod b/admin/go.mod index 9466e44..e1b9148 100644 --- a/admin/go.mod +++ b/admin/go.mod @@ -1,6 +1,6 @@ module github.com/cloudblue/chaperone/admin -go 1.26.4 +go 1.26.5 require ( github.com/prometheus/client_model v0.6.2 diff --git a/go.mod b/go.mod index e72776d..ee7e963 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/cloudblue/chaperone -go 1.26.4 +go 1.26.5 require github.com/cloudblue/chaperone/sdk v0.3.0 diff --git a/go.work b/go.work index 1dbc54f..bef8cba 100644 --- a/go.work +++ b/go.work @@ -1,4 +1,4 @@ -go 1.26.4 +go 1.26.5 use ( . diff --git a/plugins/contrib/go.mod b/plugins/contrib/go.mod index 5edf047..fb6af42 100644 --- a/plugins/contrib/go.mod +++ b/plugins/contrib/go.mod @@ -1,6 +1,6 @@ module github.com/cloudblue/chaperone/plugins/contrib -go 1.26.4 +go 1.26.5 require github.com/cloudblue/chaperone/sdk v0.3.0 diff --git a/plugins/contrib/microsoft/keyvault/go.mod b/plugins/contrib/microsoft/keyvault/go.mod index 705527a..7aa7a2d 100644 --- a/plugins/contrib/microsoft/keyvault/go.mod +++ b/plugins/contrib/microsoft/keyvault/go.mod @@ -1,6 +1,6 @@ module github.com/cloudblue/chaperone/plugins/contrib/microsoft/keyvault -go 1.26.4 +go 1.26.5 require ( github.com/Azure/azure-sdk-for-go/sdk/azcore v1.22.0 diff --git a/sdk/go.mod b/sdk/go.mod index 6ac786a..aef40df 100644 --- a/sdk/go.mod +++ b/sdk/go.mod @@ -1,3 +1,3 @@ module github.com/cloudblue/chaperone/sdk -go 1.26.4 +go 1.26.5