From b7afca8b12042834ac6fce1c56e301c398aafe4e Mon Sep 17 00:00:00 2001
From: Randy <857271370@qq.com>
Date: Thu, 12 Nov 2026 05:00:29 +0800
Subject: [PATCH] =?UTF-8?q?=E2=AC=86=EF=B8=8F=20chore:=20build=20with=20Go?=
 =?UTF-8?q?=201.27.4=20for=20GO-2026-6859?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Go 1.27.4 fixes an HTTP/1 server crash from a MaxBytesReader header race in
net/http, which govulncheck reports as reachable from Weir.
---
 Dockerfile | 2 +-
 README.md  | 2 +-
 go.mod     | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 8935dc1..dd9351d 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,4 +1,4 @@
-FROM --platform=$BUILDPLATFORM golang:1.27.3-trixie@sha256:c65ecfe613b539ac74c62a4c3b2c27e8f8a6076384c8f27e8a3c0f3be17cc385 AS build
+FROM --platform=$BUILDPLATFORM golang:1.27.4-trixie@sha256:b54b2639de8c1bfe538ec5ffc45f29b1932235ac5f6d63c059853646677112d9 AS build
 WORKDIR /src
 COPY go.mod go.sum ./
 RUN go mod download
diff --git a/README.md b/README.md
index cbe97bb..402c676 100644
--- a/README.md
+++ b/README.md
@@ -57,7 +57,7 @@ See [Performance](docs/performance.md) for the full results.
 
 | Item | Requirement |
 | --- | --- |
-| Go | 1.27.3, to build from source |
+| Go | 1.27.4, to build from source |
 | Operating system | Linux or macOS, amd64 or arm64 |
 | MongoDB | A nonsharded replica set with the client `bulkWrite` command (MongoDB 8.0 or later). Tested with 8.0.32. Lua transforms also require transactions. |
 | Search | Tested with Elasticsearch 8.19.22, OpenSearch 3.3.0, and OpenSearch 2.17.1 with `compatibility.override_main_response_version` |
diff --git a/go.mod b/go.mod
index 0e55f9b..d2dd8b8 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/batchstream/weir
 
-go 1.27.3
+go 1.27.4
 
 require (
 	github.com/batchstream/weir-go v0.24.1