From 532c02987bb85ea09656efca2506ffeb6a600466 Mon Sep 17 00:00:00 2001 From: Raj Nakarja Date: Thu, 29 Oct 2026 10:22:46 +0100 Subject: [PATCH 1/2] Build with Go 1.26.10 Releases set Go from go.mod and were building with Go 1.25, which no longer receives security fixes. --- go.mod | 2 ++ 1 file changed, 2 insertions(+) diff --git a/go.mod b/go.mod index 7558133..15afc40 100644 --- a/go.mod +++ b/go.mod @@ -1,3 +1,5 @@ module github.com/siliconwitchery/superstack-cli go 1.25 + +toolchain go1.26.10 From ba4d86f19627404bff6d2ecf1946b4372abc99ee Mon Sep 17 00:00:00 2001 From: Raj Nakarja Date: Thu, 29 Oct 2026 10:22:46 +0100 Subject: [PATCH 2/2] Check for known vulnerabilities in CI --- .github/workflows/ci.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 86ba064..eded0f1 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -51,6 +51,9 @@ jobs: exit 1 fi + - name: Check for known vulnerabilities + run: go run golang.org/x/vuln/cmd/govulncheck@v1.9.0 ./... + - name: Build the release the same way a tag would uses: goreleaser/goreleaser-action@a4f02ab5355a589de60d917a659ce617ed19b3de # v7.3.0 with: