Skip to content

Update Go to 1.27.2 so govulncheck no longer fails - #85

Merged
om986 merged 1 commit into
mainfrom
fix/go-1.27.2
Oct 13, 2026
Merged

om986 merged 1 commit into
mainfrom
fix/go-1.27.2

Conversation

@om986

@om986 om986 commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

Summary

  • Bump Go from 1.27.1 to 1.27.2 in go.mod, CI, CodeQL, release, and the builder image. Go 1.27.1 has reachable standard-library issues in net/http, crypto/tls, and html/template.
  • Bump golang.org/x/net from v0.59.0 to v0.60.0. The same HTTP/2 issues are reachable through that module.

Test plan

  • go build ./... with Go 1.27.2
  • govulncheck ./... reports no reachable vulnerabilities
  • CI govulncheck job passes on this PR

Made with Cursor

Go 1.27.1 and golang.org/x/net v0.59.0 both contain reachable HTTP, TLS, and html/template issues fixed in Go 1.27.2 and x/net v0.60.0.

Co-authored-by: Cursor <cursoragent@cursor.com>
@coderabbitai

coderabbitai Bot commented Oct 13, 2026

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration
  • Configuration used: Repository: OpenSourceOM/core/.coderabbit.yaml
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 429d38b1-0cc4-44da-bc23-352329032901
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@om986
om986 merged commit feadfdd into main Oct 13, 2026
7 checks passed
@om986
om986 deleted the fix/go-1.27.2 branch October 13, 2026 00:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant