Summary
This release includes security fixes and dependency updates for the release-0.10 branch.
Highlights
- Security vulnerability remediation: Updated Go to version 1.26.9, addressing 13 CVEs (GO-2026-6612, GO-2026-6604, GO-2026-6603, GO-2026-6611, GO-2026-6608, GO-2026-6607, GO-2026-6609, GO-2026-6613, GO-2026-6605, GO-2026-6610, GO-2026-6617, GO-2026-6599, GO-2026-6600)
- Dependency updates: Updated golang.org/x/net to v0.60.0, fixing 5 additional CVEs
- CI improvements: Upgraded golangci-lint to v2.14.0 for Go 1.26.9 compatibility and updated linter configuration
Changes
- Updated Go toolchain to 1.26.9 across all CI workflows
- Upgraded golangci-lint from v2.4.0 to v2.14.0 for full Go 1.26 support
- Updated golangci-lint configuration to work with v2.x (added exhaustruct_v5, scoped modernize exclusions)
- Fixed modernize linter findings by using strings.Builder for string concatenation