From 5058efe4dc0449f0d9b72e26923659ce0316441d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 14 Sep 2026 07:38:17 +0000 Subject: [PATCH 1/2] build: bump the go-modules group across 1 directory with 2 updates Bumps the go-modules group with 2 updates in the / directory: [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) and [golang.org/x/sys](https://github.com/golang/sys). Updates `github.com/jackc/pgx/v5` from 5.10.0 to 5.11.0 - [Release notes](https://github.com/jackc/pgx/releases) - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](https://github.com/jackc/pgx/compare/v5.10.0...v5.11.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](https://github.com/golang/sys/compare/v0.47.0...v0.48.0) --- updated-dependencies: - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] --- go.mod | 6 +++--- go.sum | 8 ++++---- 2 files changed, 7 insertions(+), 7 deletions(-) diff --git a/go.mod b/go.mod index 5f273ef..91469c6 100644 --- a/go.mod +++ b/go.mod @@ -1,17 +1,17 @@ module github.com/gsoares85/hermes -go 1.25.14 +go 1.26.0 require ( github.com/danieljoos/wincred v1.2.3 github.com/godbus/dbus/v5 v5.2.2 - github.com/jackc/pgx/v5 v5.10.0 + github.com/jackc/pgx/v5 v5.11.0 github.com/keybase/go-keychain v0.0.1 github.com/pelletier/go-toml/v2 v2.4.3 github.com/testcontainers/testcontainers-go v0.44.0 github.com/testcontainers/testcontainers-go/modules/postgres v0.44.0 github.com/wailsapp/wails/v3 v3.0.0-beta.16 - golang.org/x/sys v0.47.0 + golang.org/x/sys v0.48.0 modernc.org/sqlite v1.58.0 ) diff --git a/go.sum b/go.sum index 0e0e992..e32bf00 100644 --- a/go.sum +++ b/go.sum @@ -67,8 +67,8 @@ github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsI github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg= github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 h1:iCEnooe7UlwOQYpKFhBabPMi4aNAfoODPEFNiAnClxo= github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM= -github.com/jackc/pgx/v5 v5.10.0 h1:VhSvgU2jSli8o3AqIEOTJr7rZwAEUVo4E4XhR94Zfr0= -github.com/jackc/pgx/v5 v5.10.0/go.mod h1:mal1tBGAFfLHvZzaYh77YS/eC6IX9OWbRV1QIIM0Jn4= +github.com/jackc/pgx/v5 v5.11.0 h1:IzBBtyK9AHqf98cctWFifYSci2hgQR/cd56wB4p+ogg= +github.com/jackc/pgx/v5 v5.11.0/go.mod h1:mal1tBGAFfLHvZzaYh77YS/eC6IX9OWbRV1QIIM0Jn4= github.com/jackc/puddle/v2 v2.2.2 h1:PR8nw+E/1w0GLuRFSmiioY6UooMp6KJv0/61nB7icHo= github.com/jackc/puddle/v2 v2.2.2/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4= github.com/jchv/go-winloader v0.0.0-20250406163304-c1995be93bd1 h1:njuLRcjAuMKr7kI3D85AXWkw6/+v9PwtV6M6o11sWHQ= @@ -181,8 +181,8 @@ golang.org/x/sys v0.0.0-20200810151505-1b9f1253b3ed/go.mod h1:h1NjWce9XRLGQEsW7w golang.org/x/sys v0.0.0-20201204225414-ed752295db88/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210616094352-59db8d763f22/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs= -golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= +golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo= +golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0= golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w= golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= From 592e6acd3f775b2b86188a6ab9d3eac5cf13e70a Mon Sep 17 00:00:00 2001 From: Guilherme Soares Date: Mon, 14 Sep 2026 09:58:11 +0200 Subject: [PATCH 2/2] build: ask for a Go 1.26 that has been patched MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit golang.org/x/sys v0.48.0 declares go 1.26.0, which raises this module's directive to the same, and every CI job installs its toolchain from go.mod. The stdlib of 1.26.0 carries nineteen vulnerabilities the audit job calls by name and refuses, among them two in crypto/x509 — all of them fixed in 1.26.1 and none of them a reason to stay on a release that has been superseded eight times. The directive already pins a patch, so it asks for the current one. The README says 1.26+ for the same reason. --- README.md | 4 ++-- go.mod | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 87e3177..6682f25 100644 --- a/README.md +++ b/README.md @@ -12,7 +12,7 @@ [![Status](https://img.shields.io/badge/status-pre--alpha-orange)](#project-status) [![License](https://img.shields.io/badge/license-Apache%202.0-blue)](LICENSE) -[![Go](https://img.shields.io/badge/go-1.25%2B-00ADD8)](go.mod) +[![Go](https://img.shields.io/badge/go-1.26%2B-00ADD8)](go.mod) [![PostgreSQL](https://img.shields.io/badge/postgresql-12%2B-336791)](#requirements) [![Platforms](https://img.shields.io/badge/platforms-linux%20%7C%20macos%20%7C%20windows-blue)](#installation) @@ -104,7 +104,7 @@ about. ### From source -Requires [Go 1.25+](https://go.dev/dl/), [Node.js 22.13+](https://nodejs.org/), and the +Requires [Go 1.26+](https://go.dev/dl/), [Node.js 22.13+](https://nodejs.org/), and the [Wails v3](https://wails.io/) CLI. ```sh diff --git a/go.mod b/go.mod index 91469c6..b5f82f2 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/gsoares85/hermes -go 1.26.0 +go 1.26.8 require ( github.com/danieljoos/wincred v1.2.3