From 033a5b8ad22f7dcdef76efa8e641d4c4fc1733f6 Mon Sep 17 00:00:00 2001 From: iliya Date: Sat, 9 May 2026 14:35:06 +0300 Subject: [PATCH] fix: update Go security toolchain --- .github/workflows/ci.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/docs-canary.yml | 2 +- .github/workflows/docs-pages.yml | 2 +- .github/workflows/docs.yml | 2 +- .github/workflows/extended.yml | 2 +- .github/workflows/govulncheck.yml | 2 +- .github/workflows/homebrew-tap.yml | 2 +- .github/workflows/live.yml | 2 +- .github/workflows/polyglot-smoke.yml | 2 +- .github/workflows/release-assets.yml | 2 +- CHANGELOG.md | 2 +- Makefile | 2 +- README.md | 2 +- cli/plugin-kit-ai/README.md | 2 +- cli/plugin-kit-ai/go.mod | 2 +- go.mod | 2 +- go.work | 2 +- install/integrationctl/go.mod | 2 +- install/plugininstall/go.mod | 2 +- sdk/go.mod | 2 +- 21 files changed, 21 insertions(+), 21 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 3c56177a..2545aeb6 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -14,7 +14,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - name: Run required lane diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index eca3b768..424ae123 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -32,7 +32,7 @@ jobs: - if: matrix.language == 'go' uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - uses: github/codeql-action/init@v4 diff --git a/.github/workflows/docs-canary.yml b/.github/workflows/docs-canary.yml index 502634ec..a4b4e034 100644 --- a/.github/workflows/docs-canary.yml +++ b/.github/workflows/docs-canary.yml @@ -28,7 +28,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - name: Install pinned docs toolchain diff --git a/.github/workflows/docs-pages.yml b/.github/workflows/docs-pages.yml index f6ead0e2..396383bb 100644 --- a/.github/workflows/docs-pages.yml +++ b/.github/workflows/docs-pages.yml @@ -32,7 +32,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - name: Install landing toolchain diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index 8cbd0dbb..c212b8e2 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -30,7 +30,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - uses: actions/setup-python@v6 diff --git a/.github/workflows/extended.yml b/.github/workflows/extended.yml index 4fb3418e..40329068 100644 --- a/.github/workflows/extended.yml +++ b/.github/workflows/extended.yml @@ -29,7 +29,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - name: Run extended evidence lane diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml index a044f91e..564a37ef 100644 --- a/.github/workflows/govulncheck.yml +++ b/.github/workflows/govulncheck.yml @@ -35,7 +35,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - name: Run govulncheck diff --git a/.github/workflows/homebrew-tap.yml b/.github/workflows/homebrew-tap.yml index 355301ee..c51d2eac 100644 --- a/.github/workflows/homebrew-tap.yml +++ b/.github/workflows/homebrew-tap.yml @@ -22,7 +22,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - name: Resolve stable tag diff --git a/.github/workflows/live.yml b/.github/workflows/live.yml index d5a2a0c7..2f060c39 100644 --- a/.github/workflows/live.yml +++ b/.github/workflows/live.yml @@ -45,7 +45,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - name: Run live evidence lane diff --git a/.github/workflows/polyglot-smoke.yml b/.github/workflows/polyglot-smoke.yml index 768fa9ad..3e17c69b 100644 --- a/.github/workflows/polyglot-smoke.yml +++ b/.github/workflows/polyglot-smoke.yml @@ -21,7 +21,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - uses: actions/setup-node@v6 diff --git a/.github/workflows/release-assets.yml b/.github/workflows/release-assets.yml index 90b74724..9758b602 100644 --- a/.github/workflows/release-assets.yml +++ b/.github/workflows/release-assets.yml @@ -23,7 +23,7 @@ jobs: - uses: actions/setup-go@v6 with: - go-version: "1.25.9" + go-version: "1.25.10" cache: false - uses: goreleaser/goreleaser-action@v7 diff --git a/CHANGELOG.md b/CHANGELOG.md index 0be9ed19..d35e339d 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -44,7 +44,7 @@ Post-`v1.0.0` hardening on `main` continues here. The initial stable release was - Windows launcher validation now accepts extensionless configured entrypoints such as `./bin/x` when the generated launcher file is `./bin/x.cmd` - documentation now reflects post-`v1.0.0` contract status, the executable-ABI beta boundary, Windows runtime resolution rules, and the TypeScript-over-Node supported path - Go SDK module root moved from `sdk/plugin-kit-ai/` to `sdk/`, making `github.com/777genius/plugin-kit-ai/sdk@v1.0.4` the first truthful normal-module release; `v1.0.3` remains published but is known-bad for Go SDK consumption -- maintainer-facing docs now distinguish monorepo Go `1.25.9` requirements from generated Go plugin projects that remain on Go `1.22+`, and the repository now ships root `LICENSE` and `SECURITY.md` +- maintainer-facing docs now distinguish monorepo Go `1.25.10` requirements from generated Go plugin projects that remain on Go `1.22+`, and the repository now ships root `LICENSE` and `SECURITY.md` ## [1.0.0] - 2026-03-26 diff --git a/Makefile b/Makefile index 85aa9697..9388940c 100644 --- a/Makefile +++ b/Makefile @@ -3,7 +3,7 @@ GOCACHE ?= /tmp/plugin-kit-ai-gocache export GOCACHE -SECURITY_GOTOOLCHAIN ?= go1.25.9 +SECURITY_GOTOOLCHAIN ?= go1.25.10 EXTENDED_TEST_ARGS ?= diff --git a/README.md b/README.md index 05bf944b..c40c1714 100644 --- a/README.md +++ b/README.md @@ -271,7 +271,7 @@ For Codex lane selection, use [docs/CODEX_TARGET_BOUNDARY.md](docs/CODEX_TARGET_ Requirements: -- Go `1.25.9` for this monorepo workspace and its CI lanes +- Go `1.25.10` for this monorepo workspace and its CI lanes - generated Go plugin projects created by `plugin-kit-ai init` remain on Go `1.22+` Common commands from repo root: diff --git a/cli/plugin-kit-ai/README.md b/cli/plugin-kit-ai/README.md index dcacd1ee..dcc5d99f 100644 --- a/cli/plugin-kit-ai/README.md +++ b/cli/plugin-kit-ai/README.md @@ -89,7 +89,7 @@ go build -o bin/plugin-kit-ai ./cli/plugin-kit-ai/cmd/plugin-kit-ai Choose the lane that matches the delivery model you need today. Expand later from the same repo when the product needs more outputs. -Maintainer note: building the checked-in monorepo workspace currently requires Go `1.25.9` for the CLI module and CI lanes. Generated Go plugin projects stay on the public Go SDK path with Go `1.22+`. +Maintainer note: building the checked-in monorepo workspace currently requires Go `1.25.10` for the CLI module and CI lanes. Generated Go plugin projects stay on the public Go SDK path with Go `1.22+`. ## Fast Local Plugin For repo-local plugins where fast iteration matters more than packaged distribution: diff --git a/cli/plugin-kit-ai/go.mod b/cli/plugin-kit-ai/go.mod index 9adbad66..d6f76869 100644 --- a/cli/plugin-kit-ai/go.mod +++ b/cli/plugin-kit-ai/go.mod @@ -2,7 +2,7 @@ module github.com/777genius/plugin-kit-ai/cli go 1.23 -toolchain go1.25.9 +toolchain go1.25.10 replace github.com/777genius/plugin-kit-ai/sdk => ../../sdk diff --git a/go.mod b/go.mod index b7b237bf..f115cc8c 100644 --- a/go.mod +++ b/go.mod @@ -2,4 +2,4 @@ module github.com/777genius/plugin-kit-ai go 1.22 -toolchain go1.25.9 +toolchain go1.25.10 diff --git a/go.work b/go.work index cd23c3ec..6968af16 100644 --- a/go.work +++ b/go.work @@ -1,6 +1,6 @@ go 1.23 -toolchain go1.25.9 +toolchain go1.25.10 use ( . diff --git a/install/integrationctl/go.mod b/install/integrationctl/go.mod index a764bcc3..67b35894 100644 --- a/install/integrationctl/go.mod +++ b/install/integrationctl/go.mod @@ -2,7 +2,7 @@ module github.com/777genius/plugin-kit-ai/install/integrationctl go 1.23 -toolchain go1.25.9 +toolchain go1.25.10 require gopkg.in/yaml.v3 v3.0.1 diff --git a/install/plugininstall/go.mod b/install/plugininstall/go.mod index 43555ae2..21221598 100644 --- a/install/plugininstall/go.mod +++ b/install/plugininstall/go.mod @@ -2,4 +2,4 @@ module github.com/777genius/plugin-kit-ai/plugininstall go 1.22 -toolchain go1.25.9 +toolchain go1.25.10 diff --git a/sdk/go.mod b/sdk/go.mod index da14ce53..929633f1 100644 --- a/sdk/go.mod +++ b/sdk/go.mod @@ -2,4 +2,4 @@ module github.com/777genius/plugin-kit-ai/sdk go 1.22 -toolchain go1.25.9 +toolchain go1.25.10