Repository navigation
Upgrade Go to 1.27.3 - #2984
Merged
Benjamin Elder (BenTheElder) merged 3 commits intoOct 20, 2026
Merged
Upgrade Go to 1.27.3#2984
Conversation
otherwise they fetch the 1.27.3 toolchain using the older go's TLS
Julian Gutierrez Oschmann (juli4n)
approved these changes
Oct 20, 2026
Benjamin Elder (BenTheElder)
enabled auto-merge
October 20, 2026 18:26
Collaborator
Author
|
CI is going to take longer here, because go upgrade will bust the cache. We've clearly been saving a lot of time with the cache. |
This was referenced Oct 20, 2026
Quentin Bisson (QuentinBisson)
added a commit
to giantswarm/substrate
that referenced
this pull request
Oct 23, 2026
agent-substrate#2984 added toolchain go1.27.3 to every module, so the Go pin commit of require-golang-org-x-net-v0-61 and pin-go-1-27-3 are class 2 and drop at the re-pin onto a commit containing 3c9a3cd. The one-line toolchain pull request drafted on 2026-10-20 is withdrawn; upstream's own automation is agent-substrate#3013 (agent-substrate#3021, agent-substrate#3025).
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Go has a critical security fix. Longterm we're going to automate these but dependabot can't handle it and we're undecided on solution, Grant McCloskey (@MushuEE) / Steven Shriver (@stshrive) are looking.
NOTE: we don't have to bump the dockerfiles for go bumps, but in this case TLS is vulnerable so the download mechanism for gotoolchain is impacted, so I'm being extra-comprehensive.
AI use: Yes, I reviewed everything. Trivial diff, and tests were run