Update submodule to latest release-branch.go1.26 in microsoft/release-branch.go1.26

[bot-for-go]

Hi! I'm a bot, and this is an automatically generated upstream sync PR. 🔃

After submitting the PR, I will attempt to enable auto-merge in the "merge commit" configuration.

For more information, visit sync documentation in microsoft/go-infra.

Upstream commits included in this update

• 1ea5a71ad8 [release-branch.go1.26] go1.26.6
• 115eb476aa [release-branch.go1.26] cmd/vendor: fix CVE-2026-56865 in x/mod
• 9f6980fd5c [release-branch.go1.26] cmd/vendor: fix CVE-2026-56864 in x/mod
• 6ec908dd24 [release-branch.go1.26] encoding/asn1: enforce maximum recursion depth
• 9918f26ab3 [release-branch.go1.26] encoding/xml: fix depth processing in (*Decoder).unmarshal
• 33ecb966ca [release-branch.go1.26] html/template: fix JavaScript regexp tracking
• 128893dbf9 [release-branch.go1.26] net/url: avoid quadratic complexity in resolvePath
• 13c194062c [release-branch.go1.26] cmd/compile: do not elide riscv64 sign extension of unsigned values
• 52e5e2f22a [release-branch.go1.26] cmd/compile: fix time traveling proofs in prove
• db38ee7121 [release-branch.go1.26] cmd/compile: fix prove to generate Const64 for 64bits slicemasks
• f5bf46f361 [release-branch.go1.26] cmd/compile: fix mips64le bigger than 32bits pointer offsets
• f8d4fa6213 [release-branch.go1.26] runtime: fix frame pointer adjustment around injected calls
• efc79671b1 [release-branch.go1.26] cmd/compile: do not home mul/div results in HI/LO
• 605fd48711 [release-branch.go1.26] crypto/tls: add fips140ems GODEBUG setting to disable EMS enforcement
• 100fb8f023 [release-branch.go1.26] cmd/link: quote PE .def library name
• 4d522f275f [release-branch.go1.26] cmd/compile: tighten mergelocals address use analysis
• 0e8a244fe5 [release-branch.go1.26] all: update x/net
• 019fcb0152 [release-branch.go1.26] cmd/compile: don't require Heapaddr for heap vars in dead code
• b6432317a1 [release-branch.go1.26] crypto/tls: do not count handshake messages as state-advancing post-handshake
• ae63e27897 [release-branch.go1.26] runtime: fix uninitialized 7th argument in mach_vm_region_trampoline
• 88bf57924f [release-branch.go1.26] runtime: don't emit write barrier for code pointers in itabInit
• 4238449188 [release-branch.go1.26] os: strip trailing slashes in RemoveAll on Plan 9
• 28f27d64cf [release-branch.go1.26] os: properly handle trailing / in Root.MkdirAll
• cc312256f8 [release-branch.go1.26] runtime: be sure to scan small frame introduced by (*sigctxt).pushCall
• 07a0bbba1b [release-branch.go1.26] os: don't expect an error from Root.ReadFile from a directory on NetBSD
• a42fec40ab [release-branch.go1.26] all: update x/net
• 5bbd22ff78 [release-branch.go1.26] net/http: apply header timeout to server's unencrypted HTTP/2 check

View full diff on GitHub

[review-bot-for-go]

Thanks! Auto-approving.

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Updates the Go toolchain reference by moving the submodule to a new commit and bumping the recorded Go version, while also changing the Microsoft revision value.

Changes:

• Advance the go submodule to a new commit SHA.
• Update VERSION from go1.26.5 to go1.26.6.
• Change MICROSOFT_REVISION value from 2 to 1.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated 1 comment.

File	Description
go	Moves the Go submodule pointer to the desired upstream/tooling commit.
VERSION	Records the intended Go toolchain version for the repo/build.
MICROSOFT_REVISION	Adjusts the Microsoft revision number associated with this Go version.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
There may be pipelines that require an authorized user to comment /azp run to run.