fix: upgrade security-sensitive Go dependencies

Require Go 1.26.5, gRPC 1.82.1, and x/text 0.39.0 while retaining the dependency graph's existing pins wherever MVS permits. Restore the blocking govulncheck job and correct the documented security advisories.
This commit is contained in:
Feng Ruohang
2026-07-28 16:00:39 +08:00
parent ce01ccbdc1
commit 4dfc27ce32
8 changed files with 80 additions and 41 deletions
+1 -1
View File
@@ -1,4 +1,4 @@
FROM golang:1.26.4-alpine as build
FROM golang:1.26.5-alpine as build
ARG TARGETARCH
ARG RELEASE