From c003cbe2d36a0f33ce0f1713db781a12644bbfa2 Mon Sep 17 00:00:00 2001 From: Brandon Cook Date: Fri, 10 Jul 2026 09:32:17 +1000 Subject: [PATCH] fix: add toolchain go1.25.12 for govulncheck GO-2026-5856 The July 9 vuln DB update flags crypto/tls in go1.25.11 (fixed in 1.25.12), turning govulncheck red on dependabot PR #80 after its rebase. The toolchain directive moves CI (all jobs use go-version-file) to the patched stdlib without raising the go directive minimum for module consumers. Co-Authored-By: Claude Fable 5 --- go.mod | 2 ++ 1 file changed, 2 insertions(+) diff --git a/go.mod b/go.mod index b6cd8e7..32ee002 100644 --- a/go.mod +++ b/go.mod @@ -2,6 +2,8 @@ module github.com/shellcade/kit/v2 go 1.25.11 +toolchain go1.25.12 + require ( github.com/charmbracelet/x/ansi v0.11.7 github.com/charmbracelet/x/term v0.2.2