The first release run stopped at govulncheck: go.mod named 1.26.5, so the workflow built with it, and 1.26.5 carries four standard-library vulnerabilities the tool reaches (net/url GO-2026-6218, crypto/tls GO-2026-6090, encoding/asn1 GO-2026-5972, net/http GO-2026-5026), all fixed in 1.26.6. 1.26.8 is the current patch release; govulncheck is clean on it, and it is also the minimum for building from source.
4 lines
58 B
AMPL
4 lines
58 B
AMPL
module github.com/Coffey-Labs/ihasmail-oneshot
|
|
|
|
go 1.26.8
|