From 7c1cbb4e77e02e9325f1e7ce31993be4dde4dd1f Mon Sep 17 00:00:00 2001
From: Amp <amp@ampcode.com>
Date: Sat, 10 Oct 2026 20:20:37 +0000
Subject: [PATCH] Update relay compiler and network dependency security patches

---
 Dockerfile    | 2 +-
 docs/image.md | 2 +-
 go.mod        | 4 ++--
 go.sum        | 4 ++--
 4 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 90b28e2..4dd67a1 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -5,7 +5,7 @@
 # The binary is reproducible from the commit (pinned toolchain, go.sum,
 # -trimpath); the image digest is not, so README.md tells a customer how to
 # compare the binary.
-FROM golang:1.27.1-bookworm@sha256:69a7b9788769bec032d238959b61854e9ae87f57be9029ec04e9885fabf99195 AS build
+FROM golang:1.27.2-bookworm@sha256:5cf287a799e6b94384bad13d16b14904c531f51ba65792237e122ce42b392f61 AS build
 WORKDIR /src
 COPY go.mod go.sum ./
 RUN --mount=type=cache,target=/go/pkg/mod go mod download
diff --git a/docs/image.md b/docs/image.md
index 3fdeeeb..9b2b127 100644
--- a/docs/image.md
+++ b/docs/image.md
@@ -34,7 +34,7 @@ the image is what this repository builds:
    docker cp "$id:/usr/local/bin/perfloop-relay" published-relay
    docker rm "$id" >/dev/null
    docker run --rm -v "$PWD:/src" -w /src \
-     golang:1.27.1-bookworm@sha256:69a7b9788769bec032d238959b61854e9ae87f57be9029ec04e9885fabf99195 \
+     golang:1.27.2-bookworm@sha256:5cf287a799e6b94384bad13d16b14904c531f51ba65792237e122ce42b392f61 \
      sh -c 'CGO_ENABLED=0 GOOS=linux GOARCH=amd64 go build -trimpath -buildvcs=false -ldflags="-s -w" -o /src/local-relay ./cmd/perfloop-relay'
    sha256sum published-relay local-relay
    ```
diff --git a/go.mod b/go.mod
index 2302165..9f551ef 100644
--- a/go.mod
+++ b/go.mod
@@ -2,13 +2,13 @@ module github.com/perfloop/relay
 
 go 1.26.2
 
-toolchain go1.27.1
+toolchain go1.27.2
 
 require (
 	github.com/coder/websocket v1.8.15
 	go.uber.org/goleak v1.3.0
 	go.yaml.in/yaml/v3 v3.0.5
-	golang.org/x/net v0.59.0
+	golang.org/x/net v0.60.0
 )
 
 require golang.org/x/text v0.42.0 // indirect
diff --git a/go.sum b/go.sum
index 6f90501..d4a291b 100644
--- a/go.sum
+++ b/go.sum
@@ -10,8 +10,8 @@ go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
 go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
 go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
-golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=
-golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
+golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=
+golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
 golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI=
 golang.org/x/text v0.42.0/go.mod h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E=
 gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=