Repository navigation
[backplane/repo-fixer] fix(go): bump Go to a patched release for CA-distrust security fix - #1511
Draft
circleci-foundation-ops wants to merge 1 commit into
Draft
circleci-foundation-ops wants to merge 1 commit into
circleci-foundation-ops wants to merge 1 commit into
Conversation
Bumps Go to a patched release (CA-distrust security release; 1.25 and older are unsupported). Incident: https://thehackernews.com/2026/10/go-issues-emergency-update-blocking.html Changed: .circleci matrix cimg/go:1.22/1.23/1.24/1.25→1.26 (merged into existing 1.26 entry; matrix now 1.26, 1.27) · tools/go.mod removed redundant toolchain go1.26.10 (go directive already 1.26.10) · go.mod already 1.26.10, unchanged Fixups: none Not verified in-job: tests and lint (left to PR CI); tools module has no buildable packages (only go mod tidy run) Supersedes Renovate Go PRs. Fixer-Version: 2
circleci-foundation-ops
requested review from
calvis and
circleci-factory-bot
November 1, 2026 12:04
circleci-factory-bot
approved these changes
Nov 1, 2026
circleci-factory-bot
left a comment
circleci-factory-bot
left a comment
There was a problem hiding this comment.
PASS 🟢 impact-matches-intent ✨
SKIP ⚪ 8 skipped check(s): api-auth-and-design, agents-md-respect, author-membership, documentation, git-hygiene, go-best-practices, reduces-risk, server-compat
Details: https://github.com/circleci/factory-bot-unredacted-reviews/issues/75
🤖 factory-bot · bystander mode · reviewed @ 2026-11-01T12:04:29Z · re-request a review to re-run
[trace:f2e7f91] [bot e0855c2] [config 3b2f99e] [target 042628f]
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Important
This PR was AI-generated by the backplane-cicd repo-fixer pipeline. Give feedback in #backplane-ecosystem.
fix(go): bump Go to a patched release for CA-distrust security fix
Bumps Go to a patched release (CA-distrust security release; 1.25 and older are unsupported).
Incident: https://thehackernews.com/2026/10/go-issues-emergency-update-blocking.html
Changed: .circleci matrix cimg/go:1.22/1.23/1.24/1.25→1.26 (merged into existing 1.26 entry; matrix now 1.26, 1.27) · tools/go.mod removed redundant toolchain go1.26.10 (go directive already 1.26.10) · go.mod already 1.26.10, unchanged
Fixups: none
Not verified in-job: tests and lint (left to PR CI); tools module has no buildable packages (only go mod tidy run)
Supersedes Renovate Go PRs.
Fixer-Version: 2