From 22a59b811fb615fe49cfae111854ab8abca4a32d Mon Sep 17 00:00:00 2001 From: Sebastiaan van Stijn Date: Wed, 21 Oct 2026 00:08:59 +0200 Subject: [PATCH] update to go1.26.10 These releases include 1 security fix following the security policy: - crypto/x509: mitigation for security concerns with a specific Certificate Authority We're blocking trust in a small set of intermediate certificates due to specific security concerns around their operation. Verify will now filter out chains which contain these intermediates, preventing them from being returned to the caller. We highly recommend immediately upgrading to this release. This is CVE-2026-111943 and Go issue https://go.dev/issue/82345. release notes: https://go.dev/doc/devel/release#go1.26.10 Signed-off-by: Sebastiaan van Stijn --- .go-version | 2 +- Dockerfile | 2 +- relay/Dockerfile | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.go-version b/.go-version index 3cd33cde0f7..63d92c7fb83 100644 --- a/.go-version +++ b/.go-version @@ -1 +1 @@ -1.26.9 +1.26.10 diff --git a/Dockerfile b/Dockerfile index 831233d1246..c7e3c0b391c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -15,7 +15,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -ARG GO_VERSION=1.26.9 +ARG GO_VERSION=1.26.10 ARG XX_VERSION=1.9.0 ARG GOLANGCI_LINT_VERSION=v2.13.2 ARG ADDLICENSE_VERSION=v1.0.0 diff --git a/relay/Dockerfile b/relay/Dockerfile index 7b4db01d740..55ab45eae84 100644 --- a/relay/Dockerfile +++ b/relay/Dockerfile @@ -15,7 +15,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -ARG GO_VERSION=1.26.9 +ARG GO_VERSION=1.26.10 ARG GOLANGCI_LINT_VERSION=v2.13.2 FROM golangci/golangci-lint:${GOLANGCI_LINT_VERSION}-alpine AS golangci-lint