mirror of
https://github.com/alibaba/open-code-review.git
synced 2026-08-23 07:34:25 +00:00
3496360c40
Some checks are pending
CI / cross-compile (arm64, windows) (push) Waiting to run
CI / test (push) Waiting to run
CI / cross-compile (amd64, darwin) (push) Waiting to run
CI / cross-compile (amd64, windows) (push) Waiting to run
CI / cross-compile (arm64, darwin) (push) Waiting to run
CI / cross-compile (arm64, linux) (push) Waiting to run
CodeQL Advanced / Analyze (go) (push) Waiting to run
CodeQL Advanced / Analyze (actions) (push) Waiting to run
CodeQL Advanced / Analyze (javascript-typescript) (push) Waiting to run
govulncheck now fails on golang:1.26.5: the Go vulnerability database lists fixes in 1.26.6 for seven standard-library issues reachable from this module (GO-2026-6218, -6091, -6090, -6089, -6088, -5972, -5026), via net/url, html/template, crypto/tls, net/http, encoding/xml and encoding/asn1. Nothing in the module's own code changed — the step turned red when the database was updated, and because Govulncheck runs before "Test with coverage", every PR is now blocked before a single test executes. Bump the pinned image in the test, cross-compile and release jobs, and refresh the stale version reference in the translation-sync comment so it keeps matching the other jobs. Verified locally under go1.26.6: govulncheck reports no vulnerabilities and exits 0, gofmt -s and go vet are clean, go mod tidy is a no-op, and the full test suite passes (23 packages). |
||
|---|---|---|
| .. | ||
| ISSUE_TEMPLATE | ||
| workflows | ||
| dependabot.yml | ||
| pull_request_template.md | ||
| release.yml | ||