From 917cd2f889a55cc59af5ffea3f1b16c789ca05f2 Mon Sep 17 00:00:00 2001 From: Calin Teodor Date: Mon, 13 Jul 2026 12:58:53 +0300 Subject: [PATCH 1/3] ci: track go toolchain from go.mod (cascade bumps raise the directive) Co-Authored-By: Claude Fable 5 --- .github/workflows/ci.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 131bf92..83bf874 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -17,7 +17,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: '1.25' + go-version-file: go.mod cache: true - name: Run tests with coverage From 1468cc6f56795b4d302295898ef4f5f6798f4768 Mon Sep 17 00:00:00 2001 From: Calin Teodor Date: Mon, 13 Jul 2026 12:58:56 +0300 Subject: [PATCH 2/3] ci: track go toolchain from go.mod (cascade bumps raise the directive) Co-Authored-By: Claude Fable 5 --- .github/workflows/security.yml | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 4a6819a..d171219 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -19,7 +19,7 @@ jobs: - uses: actions/checkout@v7 - uses: actions/setup-go@v6 with: - go-version: '1.25' + go-version-file: go.mod cache: true - name: go test -race ./... run: go test -race ./... @@ -34,7 +34,7 @@ jobs: - uses: actions/checkout@v7 - uses: actions/setup-go@v6 with: - go-version: '1.25' + go-version-file: go.mod cache: true - name: Initialize CodeQL uses: github/codeql-action/init@v4 @@ -54,7 +54,7 @@ jobs: - uses: actions/checkout@v7 - uses: actions/setup-go@v6 with: - go-version: '1.25' + go-version-file: go.mod cache: true # Scoped to the crown-jewel badge crypto. The rest of the module # carries pre-existing G104 findings (unhandled Close()/Set() errors) @@ -70,7 +70,7 @@ jobs: - uses: actions/checkout@v7 - uses: actions/setup-go@v6 with: - go-version: '1.25' + go-version-file: go.mod cache: true - name: govulncheck run: go run golang.org/x/vuln/cmd/govulncheck@v1.1.4 ./... @@ -103,7 +103,7 @@ jobs: - uses: actions/checkout@v7 - uses: actions/setup-go@v6 with: - go-version: '1.25' + go-version-file: go.mod cache: true # Bounded fuzz window over every badgeverify target. Seed corpora are # deterministic; this re-runs the seeds and explores new inputs for a From 78a5277b5ebfd46d3a36146673529f0fe66a74cd Mon Sep 17 00:00:00 2001 From: Calin Teodor Date: Mon, 13 Jul 2026 12:59:03 +0300 Subject: [PATCH 3/3] go.mod: bump go directive to 1.25.12 (GO-2026-5856) Co-Authored-By: Claude Fable 5 --- go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/go.mod b/go.mod index 35bc3d5..c860d5f 100644 --- a/go.mod +++ b/go.mod @@ -1,3 +1,3 @@ module github.com/pilot-protocol/common -go 1.25.11 +go 1.25.12