Skip to content

chore(deps): bump Go to 1.27.2 + x/net to 0.60.0 (GO-2026 CVEs) - #9

Merged
bahattincinic merged 1 commit into
mainfrom
chore/go-1.27.2
Oct 12, 2026
Merged

bahattincinic merged 1 commit into
mainfrom
chore/go-1.27.2

Conversation

@bahattincinic

Copy link
Copy Markdown
Member

Closes the GO-2026 CVE wave for this module.

  • Go directive 1.27.0 → 1.27.2 — html/template GO-2026-6599/6600 + the other GO-2026 stdlib advisories.
  • golang.org/x/net → 0.60.0 — five net/http HTTP/2 advisories (GO-2026-6603/6610/6611/6612/6617).

Verify: builds under go1.27.2; govulncheck ./... → 0 vulnerabilities.

🤖 Generated with Claude Code

https://claude.ai/code/session_01H6QqfGW69oPJjXJwF2NjQt

- Go directive 1.27.0 -> 1.27.2 (html/template GO-2026-6599/6600 and
  the other GO-2026 stdlib advisories).
- golang.org/x/net -> 0.60.0 (net/http HTTP/2 advisories
  GO-2026-6603/6610/6611/6612/6617).

govulncheck reports 0 vulnerabilities; builds clean.
@bahattincinic
bahattincinic merged commit 229ea71 into main Oct 12, 2026
6 checks passed
@bahattincinic
bahattincinic deleted the chore/go-1.27.2 branch October 12, 2026 12:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant