security(build): upgrade release toolchain to Go 1.26.6

Advance local, release, and container build surfaces together so reachable standard-library advisories cannot re-enter shipped binaries. Pin the official amd64 builder manifest and govern the updated floor with installability and dev-runtime proofs.

Change-source: pulse-maintainer
This commit is contained in:
pulse-triage[bot] 2026-08-27 04:23:56 +01:00
parent 1dc5ee4942
commit 5859f49817
11 changed files with 30 additions and 10 deletions

View file

@ -3,7 +3,7 @@ set -euo pipefail
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
VERSION_FILE="${SCRIPT_DIR}/.go-version"
DEFAULT_VERSION="go1.26.5"
DEFAULT_VERSION="go1.26.6"
TARGET_ROOT="/opt/toolchains/go"
DOWNLOAD_ROOT="https://dl.google.com/go"
GOPATH_DIR="/var/lib/pulse/go"