From 8b5573a900df95e38f784e4438b0a973bd95c51e Mon Sep 17 00:00:00 2001 From: Wasabules <39313803+Wasabules@users.noreply.github.com> Date: Tue, 13 Oct 2026 00:20:40 +0200 Subject: [PATCH] chore(deps): move to go 1.26.9, which closes nine standard library holes MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit govulncheck has been failing on every open pull request, and not because of what any of them change: the toolchain pinned in go.mod is affected by nine vulnerabilities our own code reaches — seven in net/http, one in net/textproto and one in crypto/tls — all fixed in go1.26.9. A syslog receiver that listens on TCP and TLS is exactly the kind of program those reach. The version lives in go.mod alone and CI reads it from there, so this one line moves the build, the tests and the release. --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index be08753..7076c32 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module SyslogStudio -go 1.26.8 +go 1.26.9 require ( fyne.io/systray v1.12.2