From 665af930819a2e48dfebb653b83ca071b2f45e09 Mon Sep 17 00:00:00 2001
From: Manuel de Brito Fontes <aledbf@gmail.com>
Date: Thu, 12 Nov 2026 15:14:43 -0300
Subject: [PATCH] go: toolchain 1.27.4, for GO-2026-6859 in net/http

vulngate reds every change on 1.27.3: the advisory is in net/http, which the tools call, and
1.27.4 is the release that fixes it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 go.mod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index c3739da..f861f73 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/spin-stack/go-tools
 
 go 1.27.0
 
-toolchain go1.27.3
+toolchain go1.27.4
 
 require (
 	github.com/CycloneDX/cyclonedx-go v0.12.0