Skip to content

deps(deps): golang 1.26.10 - #820

Open
Krzysztof Pudłowski (djkormo) wants to merge 1 commit into
microsoft:mainfrom
djkormo:release-v1.10.1
Open

Krzysztof Pudłowski (djkormo) wants to merge 1 commit into
microsoft:mainfrom
djkormo:release-v1.10.1

Conversation

@djkormo

@djkormo Krzysztof Pudłowski (djkormo) commented Oct 25, 2026 •

Copy link
Copy Markdown
  1. Upgrading to golang 1.26.10
  2. Removing CVEs

CVEs after changes

obraz

Copilot AI balanced review requested due to automatic review settings October 25, 2026 18:32
@djkormo

Copy link
Copy Markdown
Author

@microsoft-github-policy-service agree

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

Release availability, dependency compatibility, and CVE remediation remain unverified and require successful CI and vulnerability-scan evidence.

No open issues 🎉

What changed in this PR

This PR updates go-sqlcmd’s Go toolchain preference and dependencies to address reported vulnerabilities.

Changes:

  • Sets the preferred toolchain to Go 1.26.10 and normalizes the minimum Go version to 1.26.0.
  • Upgrades eight golang.org/x modules.
  • Adds checksums for the upgraded module versions.
File Description
go.sum Adds checksums for the updated dependencies.
go.mod Updates the Go directives and dependency versions.

Review effort: Balanced

@djkormo Krzysztof Pudłowski (djkormo) changed the title initial hardening commit deps for golang 1.26.10 Oct 25, 2026
@djkormo Krzysztof Pudłowski (djkormo) changed the title deps for golang 1.26.10 deps(deps): golang 1.26.10 Oct 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants