From 793900336265ccc0cad8bb2f9b11a6d3a0dce26e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Oct 2026 01:41:53 +0000 Subject: [PATCH 1/2] chore(deps): bump golang in /workers/execution-smoke-go Bumps golang from 1.27.1 to 1.27.2. --- updated-dependencies: - dependency-name: golang dependency-version: 1.27.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- workers/execution-smoke-go/Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/workers/execution-smoke-go/Dockerfile b/workers/execution-smoke-go/Dockerfile index 01ee87d..20dc524 100644 --- a/workers/execution-smoke-go/Dockerfile +++ b/workers/execution-smoke-go/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.27.1@sha256:512690a5660563b57d37ecc31129e7f136e831db2aed24a1dbeb8ad7380dc0fa AS build +FROM golang:1.27.2@sha256:5bc7f572bbaa98885a3a1fd9c0aa76b59e3e14e8628bfc316bbfd0c701e4818c AS build WORKDIR /src COPY clients/go/go.mod ./clients/go/go.mod From d8e5492cfb074d217b2dbd38a2091bb045a085df Mon Sep 17 00:00:00 2001 From: jeremydixon22 Date: Mon, 12 Oct 2026 05:25:31 -0400 Subject: [PATCH 2/2] Align supported Go toolchain with security update --- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/execution-runtime-consumer.yml | 2 +- .github/workflows/release-integrity.yml | 2 +- scripts/verify-version-policy.py | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index ff5a11a..2103a9e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -137,7 +137,7 @@ jobs: if: ${{ needs.changes.outputs.go == 'true' }} uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: - go-version: "1.27.1" + go-version: "1.27.2" # This module intentionally has no go.sum yet; setup-go's cache lookup warns on it. cache: false diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 8621d82..0cfce58 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -90,7 +90,7 @@ jobs: if: ${{ steps.selection.outputs.enabled == 'true' && matrix.language == 'go' }} uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: - go-version: "1.27.1" + go-version: "1.27.2" cache: false - name: Initialize CodeQL diff --git a/.github/workflows/execution-runtime-consumer.yml b/.github/workflows/execution-runtime-consumer.yml index d8ac870..9abc772 100644 --- a/.github/workflows/execution-runtime-consumer.yml +++ b/.github/workflows/execution-runtime-consumer.yml @@ -85,7 +85,7 @@ jobs: - name: Set up Go uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: - go-version: "1.27.1" + go-version: "1.27.2" cache: false - name: Restore diff --git a/.github/workflows/release-integrity.yml b/.github/workflows/release-integrity.yml index b420b7b..4ea846d 100644 --- a/.github/workflows/release-integrity.yml +++ b/.github/workflows/release-integrity.yml @@ -56,7 +56,7 @@ jobs: if: ${{ github.event_name != 'pull_request' }} uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: - go-version: "1.27.1" + go-version: "1.27.2" cache: false - name: Install Python release tooling diff --git a/scripts/verify-version-policy.py b/scripts/verify-version-policy.py index 1c94a60..fd9e9ca 100755 --- a/scripts/verify-version-policy.py +++ b/scripts/verify-version-policy.py @@ -20,7 +20,7 @@ PYTHON_RUNTIME_VERSION = "0.1.4" PYTHON_RUNTIME_FIXTURE_MINIMUM = "0.1.0" GO_MINIMUM_VERSION = "1.25.0" -GO_BUILD_VERSION = "1.27.1" +GO_BUILD_VERSION = "1.27.2" BUBBLEWRAP_BUILD_VERSION = "0.11.2" BUBBLEWRAP_BUILD_SHA256 = ( "69abc30005d2186baf7737feacd8da35633b93cf5af38838ecff17c5f8e924f6"