From db4c0fd5e375761013896bffe4eda8563adc5ec8 Mon Sep 17 00:00:00 2001 From: Feng Ruohang Date: Thu, 16 Apr 2026 15:08:42 +0800 Subject: [PATCH] fix: bump Go to 1.26.2 for upstream security fixes Update go.mod and all golang build images from 1.26.1 to 1.26.2 to pick up the upstream 2026-04-07 security release. This includes fixes for CVE-2026-32280 / CVE-2026-32281 in crypto/x509, CVE-2026-32283 in crypto/tls, and the related toolchain and standard library security fixes shipped in go1.26.2, without changing any unrelated dependencies. --- Dockerfile.goreleaser | 2 +- Dockerfile.hotfix | 2 +- Dockerfile.release | 2 +- Dockerfile.release.old_cpu | 2 +- go.mod | 2 +- 5 files changed, 5 insertions(+), 5 deletions(-) diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser index 89f609908..9d570194b 100644 --- a/Dockerfile.goreleaser +++ b/Dockerfile.goreleaser @@ -1,4 +1,4 @@ -FROM golang:1.26.1-alpine AS build +FROM golang:1.26.2-alpine AS build ARG TARGETARCH diff --git a/Dockerfile.hotfix b/Dockerfile.hotfix index 3e6b4a87c..2049f1dec 100644 --- a/Dockerfile.hotfix +++ b/Dockerfile.hotfix @@ -1,4 +1,4 @@ -FROM golang:1.26.1-alpine as build +FROM golang:1.26.2-alpine as build ARG TARGETARCH ARG RELEASE diff --git a/Dockerfile.release b/Dockerfile.release index 02648255b..da56b0135 100644 --- a/Dockerfile.release +++ b/Dockerfile.release @@ -1,4 +1,4 @@ -FROM golang:1.26.1-alpine AS build +FROM golang:1.26.2-alpine AS build ARG TARGETARCH ARG RELEASE diff --git a/Dockerfile.release.old_cpu b/Dockerfile.release.old_cpu index 81ce4eec3..81b77ccef 100644 --- a/Dockerfile.release.old_cpu +++ b/Dockerfile.release.old_cpu @@ -1,4 +1,4 @@ -FROM golang:1.26.1-alpine AS build +FROM golang:1.26.2-alpine AS build ARG TARGETARCH ARG RELEASE diff --git a/go.mod b/go.mod index 7ee186357..c2993b64f 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/minio/minio -go 1.26.1 +go 1.26.2 // Use Georg Mangold's maintained Console fork while keeping upstream import paths. replace github.com/minio/console => github.com/georgmangold/console v1.9.1