mirrors/remark42
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): pin go-version to 1.25.12 for GO-2026-5856

Browse Source 
setup-go with go-version "1.25" resolved to 1.25.11, which govulncheck flags for
GO-2026-5856 (ECH privacy leak in crypto/tls, fixed in go1.25.12). Pin the exact
patch in ci-backend.yml and release.yml so the vuln scan passes and release
binaries build on the fixed toolchain.
This commit is contained in:
Umputun
2026-07-11 02:05:58 -05:00
parent 51b6a7e890
commit 76d0cc2cf6
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.github/workflows/ci-backend.yml
+2 -2
View File
@@ -42,7 +42,7 @@ jobs:
- name: install go - name: install go
uses: actions/setup-go@v6 uses: actions/setup-go@v6
with: with:
go-version: "1.25" go-version: "1.25.12"
cache-dependency-path: backend cache-dependency-path: backend
- name: test and build backend - name: test and build backend
@@ -97,7 +97,7 @@ jobs:
- name: install go - name: install go
uses: actions/setup-go@v6 uses: actions/setup-go@v6
with: with:
go-version: "1.25" go-version: "1.25.12"
# both go.sum files so the cache key covers the main and example modules scanned below # both go.sum files so the cache key covers the main and example modules scanned below
cache-dependency-path: | cache-dependency-path: |
backend/go.sum backend/go.sum
.github/workflows/release.yml
+2 -2
View File
@@ -32,7 +32,7 @@ jobs:
- name: install go - name: install go
uses: actions/setup-go@v6 uses: actions/setup-go@v6
with: with:
go-version: "1.25" go-version: "1.25.12"
cache-dependency-path: backend/go.sum cache-dependency-path: backend/go.sum
- name: install pnpm - name: install pnpm
@@ -107,7 +107,7 @@ jobs:
- name: install go - name: install go
uses: actions/setup-go@v6 uses: actions/setup-go@v6
with: with:
go-version: "1.25" go-version: "1.25.12"
cache-dependency-path: backend/go.sum cache-dependency-path: backend/go.sum
- name: install pnpm - name: install pnpm