From 993a959b45fb0e480d8f662b9cb9ffb1c63c34b8 Mon Sep 17 00:00:00 2001 From: BMAD CI Fix Agent Date: Sun, 11 Oct 2026 18:14:29 -0500 Subject: [PATCH] fix(go): bump toolchain builder to 1.26.9 --- CHANGELOG.md | 6 ++++++ Dockerfile | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index fbb0bd2..15bb14b 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0 ## [Unreleased] +### Changed + +- Bump the Go builder image to `golang:1.26-bookworm` so + `govulncheck` runs with the patched Go standard library required by + downstream Go projects. + ### Fixed - Install gitleaks from official release binaries (linux amd64/arm64) instead diff --git a/Dockerfile b/Dockerfile index f2b0689..5aca84e 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ # === Builder stage: Go-based tools === # Compiles Go-based tools (shfmt, tflint, terraform-docs, trivy, gitleaks) -FROM golang:1.25-bookworm AS go-builder +FROM golang:1.26-bookworm AS go-builder ARG TARGETARCH ENV GOTOOLCHAIN=auto