Skip to content

unpin Go patch version in go.mod#106

Merged
rdimitrov merged 1 commit into
mainfrom
unpin-go-patch-version
May 12, 2026
Merged

unpin Go patch version in go.mod#106
rdimitrov merged 1 commit into
mainfrom
unpin-go-patch-version

Conversation

@rdimitrov
Copy link
Copy Markdown
Member

Summary

  • Change go 1.26.3go 1.26 in go.mod so this repo matches the other toolhive projects (toolhive, toolhive-catalog, toolhive-core all use go 1.26).
  • All CI workflows already use go-version-file: 'go.mod', so actions/setup-go will resolve 1.26 to the latest available patch — we keep getting stdlib CVE fixes automatically, which was the motivation behind the 1.26.3 pin in Fix/security fixes #105.
  • go mod tidy also cleaned up some stale go.sum entries left over from earlier dependency bumps.

Test plan

  • CI green (build, lint, test, security)
  • Confirm actions/setup-go logs in CI show a 1.26.x version installed

🤖 Generated with Claude Code

Use `go 1.26` instead of `go 1.26.3` to match toolhive, toolhive-catalog,
and toolhive-core. CI uses `go-version-file: 'go.mod'`, so setup-go will
resolve to the latest available 1.26.x and keep picking up stdlib CVE
fixes automatically — which is what the 1.26.3 pin in #105 was after.

`go mod tidy` also dropped some stale go.sum entries left over from
previous bumps.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
@rdimitrov rdimitrov requested a review from glageju May 12, 2026 15:13
@rdimitrov rdimitrov merged commit bfcdd3e into main May 12, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants