From 626e2e58d678a5f07c79f5bd820cf87f011d0b29 Mon Sep 17 00:00:00 2001 From: Teo Calin Date: Thu, 1 Oct 2026 17:33:10 +0300 Subject: [PATCH] ci: unblock the security check; common v0.5.15, Go 1.25.13 The govulncheck job has failed on every PR for two separate reasons: `go install govulncheck@latest` now resolves to v1.8.0, which needs Go 1.26, and Go 1.25.12 has standard-library advisories fixed in 1.25.13. Pin govulncheck to v1.7.0 and take common v0.5.15, which also moves the go directive to 1.25.13. Supersedes the stuck cascade bump #47. Co-Authored-By: Claude Opus 5.5 --- .github/workflows/security.yml | 4 +++- go.mod | 4 ++-- go.sum | 4 ++-- 3 files changed, 7 insertions(+), 5 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 7e5daa2..29319c0 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -48,7 +48,9 @@ jobs: go-version-file: go.mod cache: true - name: Install govulncheck - run: go install golang.org/x/vuln/cmd/govulncheck@latest + # Pinned: @latest (v1.8.0) needs Go 1.26, and this module builds + # with the Go version in go.mod. + run: go install golang.org/x/vuln/cmd/govulncheck@v1.7.0 - name: Run govulncheck env: GOWORK: off diff --git a/go.mod b/go.mod index 041c22b..a1f1593 100644 --- a/go.mod +++ b/go.mod @@ -1,5 +1,5 @@ module github.com/pilot-protocol/trustedagents -go 1.25.12 +go 1.25.13 -require github.com/pilot-protocol/common v0.5.13 +require github.com/pilot-protocol/common v0.5.15 diff --git a/go.sum b/go.sum index 52178b4..d6520a3 100644 --- a/go.sum +++ b/go.sum @@ -1,2 +1,2 @@ -github.com/pilot-protocol/common v0.5.13 h1:h9NmPh37ZZujktpSAwgq2H2ai7jG240nQTetGNWtZ3U= -github.com/pilot-protocol/common v0.5.13/go.mod h1:Ybc6f1A37s3ShoEh1nBMVL9DPyYlxvkqPTvtbxaNWg4= +github.com/pilot-protocol/common v0.5.15 h1:ds6DNWlth97pMcXZ7fMgfy9/s553la3/YuYOkwoXjjE= +github.com/pilot-protocol/common v0.5.15/go.mod h1:OTXD84ScrBbKTAhawgFlLw9HtisgNvr83Zs1yDAuG9k=