From 25a716960197d7ecbccb2bcca8feb65ac44f6e78 Mon Sep 17 00:00:00 2001 From: shaw Date: Thu, 9 Jul 2026 14:06:57 +0800 Subject: [PATCH] =?UTF-8?q?chore:=20Go=20=E5=B7=A5=E5=85=B7=E9=93=BE?= =?UTF-8?q?=E5=8D=87=E7=BA=A7=201.26.4=20=E2=86=92=201.26.5=E2=80=94?= =?UTF-8?q?=E2=80=94=E4=BF=AE=E5=A4=8D=20stdlib=20=E6=BC=8F=E6=B4=9E?= =?UTF-8?q?=E5=B9=B6=E8=A1=A5=E9=BD=90=20CI=20=E7=89=88=E6=9C=AC=E5=BC=95?= =?UTF-8?q?=E7=94=A8?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit - backend/go.mod 工具链 1.26.5：修复 stdlib crypto/tls 漏洞（GO-2026-5856） - 同步全部构建/校验点的硬编码版本：根 Dockerfile、backend/Dockerfile、 deploy/Dockerfile 基础镜像；backend-ci / release / security-scan 三个 workflow 的 go version 校验 --- .github/workflows/backend-ci.yml | 4 ++-- .github/workflows/release.yml | 2 +- .github/workflows/security-scan.yml | 2 +- Dockerfile | 2 +- backend/Dockerfile | 2 +- backend/go.mod | 2 +- deploy/Dockerfile | 2 +- 7 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/backend-ci.yml b/.github/workflows/backend-ci.yml index a9cf349937..bb5cf692bc 100644 --- a/.github/workflows/backend-ci.yml +++ b/.github/workflows/backend-ci.yml @@ -20,7 +20,7 @@ jobs: cache-dependency-path: backend/go.sum - name: Verify Go version run: | - go version | grep -q 'go1.26.4' + go version | grep -q 'go1.26.5' - name: Unit tests working-directory: backend run: make test-unit @@ -60,7 +60,7 @@ jobs: cache-dependency-path: backend/go.sum - name: Verify Go version run: | - go version | grep -q 'go1.26.4' + go version | grep -q 'go1.26.5' - name: golangci-lint uses: golangci/golangci-lint-action@v9 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f8c5dcfbfa..2ba01833c1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -115,7 +115,7 @@ jobs: - name: Verify Go version run: | - go version | grep -q 'go1.26.4' + go version | grep -q 'go1.26.5' # Docker setup for GoReleaser - name: Set up QEMU diff --git a/.github/workflows/security-scan.yml b/.github/workflows/security-scan.yml index ab3305ab6e..96a7ae4edd 100644 --- a/.github/workflows/security-scan.yml +++ b/.github/workflows/security-scan.yml @@ -23,7 +23,7 @@ jobs: cache-dependency-path: backend/go.sum - name: Verify Go version run: | - go version | grep -q 'go1.26.4' + go version | grep -q 'go1.26.5' - name: Run govulncheck working-directory: backend run: | diff --git a/Dockerfile b/Dockerfile index 13a6b8700d..17b631d5a0 100644 --- a/Dockerfile +++ b/Dockerfile @@ -8,7 +8,7 @@ # ============================================================================= ARG NODE_IMAGE=node:24-alpine -ARG GOLANG_IMAGE=golang:1.26.4-alpine +ARG GOLANG_IMAGE=golang:1.26.5-alpine ARG ALPINE_IMAGE=alpine:3.21 ARG POSTGRES_IMAGE=postgres:18-alpine ARG GOPROXY=https://goproxy.cn,direct diff --git a/backend/Dockerfile b/backend/Dockerfile index d4adb5564b..9976abe46b 100644 --- a/backend/Dockerfile +++ b/backend/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.26.4-alpine +FROM golang:1.26.5-alpine WORKDIR /app diff --git a/backend/go.mod b/backend/go.mod index 53d0596ef5..a06f06437d 100644 --- a/backend/go.mod +++ b/backend/go.mod @@ -1,6 +1,6 @@ module github.com/Wei-Shaw/sub2api -go 1.26.4 +go 1.26.5 require ( entgo.io/ent v0.14.5 diff --git a/deploy/Dockerfile b/deploy/Dockerfile index d83b0e25b8..88d364a7f3 100644 --- a/deploy/Dockerfile +++ b/deploy/Dockerfile @@ -7,7 +7,7 @@ # ============================================================================= ARG NODE_IMAGE=node:24-alpine -ARG GOLANG_IMAGE=golang:1.26.4-alpine +ARG GOLANG_IMAGE=golang:1.26.5-alpine ARG ALPINE_IMAGE=alpine:3.20 ARG GOPROXY=https://goproxy.cn,direct ARG GOSUMDB=sum.golang.google.cn