vrr/Pulse
2
0
Fork 0
mirror of https://github.com/rcourtman/Pulse.git synced 2026-10-15 19:00:26 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

security(build): upgrade release toolchain to Go 1.26.6

Browse source 
Advance local, release, and container build surfaces together so reachable standard-library advisories cannot re-enter shipped binaries. Pin the official amd64 builder manifest and govern the updated floor with installability and dev-runtime proofs.

Change-source: pulse-maintainer
This commit is contained in:
pulse-triage[bot] 2026-08-27 04:23:56 +01:00
parent 1dc5ee4942
commit 5859f49817
11 changed files with 30 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

11
scripts/tests/test-hot-dev-runtime.sh
View file

@ -334,6 +334,16 @@ test_go_module_security_dependency_floors() {
assert_contains "Go module floor keeps x/sys aligned with security module graph" "${output}" "golang.org/x/sys v0.47.0"
}
test_go_release_toolchain_floor() {
local module_toolchain installed_toolchain
module_toolchain="$(sed -n 's/^toolchain //p' "${ROOT_DIR}/go.mod")"
installed_toolchain="$(cd "${ROOT_DIR}" && go env GOVERSION)"
assert_contains "Go module uses the patched release toolchain" "${module_toolchain}" "go1.26.6"
assert_contains "dev toolchain installer uses the patched release toolchain" "$(<"${ROOT_DIR}/scripts/.go-version")" "go1.26.6"
assert_contains "active dev runtime resolves the patched release toolchain" "${installed_toolchain}" "go1.26.6"
}
test_backend_race_suite_keeps_hosted_runner_timeout_headroom() {
local output
output="$(sed -n '1,125p' "${MAKEFILE}")"
@ -355,6 +365,7 @@ test_hot_dev_lab_agent_mode_enables_lan_and_guest_docker_inventory_defaults
test_hot_dev_remembers_explicit_lab_agent_mode_for_later_managed_starts
test_hot_dev_browser_urls_distinguish_bind_and_browser_hosts
test_go_module_security_dependency_floors
test_go_release_toolchain_floor
test_backend_race_suite_keeps_hosted_runner_timeout_headroom
if (( failures > 0 )); then