Skip to content

fix: bump go version to fix vulnerability GO-2026-4337#313

Merged
qnen merged 1 commit intomainfrom
hotfix/bump-go-version-to-fix-vulnerability
Feb 18, 2026
Merged

fix: bump go version to fix vulnerability GO-2026-4337#313
qnen merged 1 commit intomainfrom
hotfix/bump-go-version-to-fix-vulnerability

Conversation

@qnen
Copy link
Contributor

@qnen qnen commented Feb 18, 2026

Pull Request Checklist

Pull Request Type

  • Feature
  • Fix
  • Refactor
  • Pipeline
  • Tests
  • Documentation

Checklist

Please check each item after it's completed.

  • I have tested these changes locally.
  • I have updated the documentation accordingly.
  • I have added necessary comments to the code, especially in complex areas.
  • I have ensured that my changes adhere to the project's coding standards.
  • I have checked for any potential security issues.
  • I have ensured that all tests pass.
  • I have updated the version appropriately (if applicable).
  • I have confirmed this code is ready for review.

Additional Notes

Obs: Please, always remember to target your PR to develop branch instead of main.

@qnen qnen self-assigned this Feb 18, 2026
@coderabbitai
Copy link

coderabbitai bot commented Feb 18, 2026

Walkthrough

This pull request updates the Go module dependencies in go.mod. The Go version is bumped from 1.24.2 to 1.25.0, and the toolchain from go1.25.6 to go1.25.7. Multiple direct dependencies are upgraded, including redis/go-redis from v9.17.3 to v9.18.0, google.golang.org/api from v0.265.0 to v0.267.0, and google.golang.org/grpc from v1.78.0 to v1.79.1. Additionally, numerous indirect transitive dependencies receive version updates to maintain compatibility with the newer dependency versions. No changes to application logic or functionality are introduced.

🚥 Pre-merge checks | ✅ 1 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name Status Explanation Resolution
Description check ❓ Inconclusive The description includes the required template structure with all sections present, but no checklist items are marked as completed, indicating incomplete verification before submission. Check and mark appropriate PR type (Fix is indicated), complete relevant checklist items to confirm testing, security review, and readiness for merge.
✅ Passed checks (1 passed)
Check name Status Explanation
Title check ✅ Passed The title clearly and specifically summarizes the main change: bumping the Go version to fix a vulnerability, with the CVE identifier included.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.


Comment @coderabbitai help to get the list of available commands and usage tips.

Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@go.mod`:
- Around line 3-5: Update the module's Go version declaration: replace the
invalid "go 1.25.0" entry in go.mod with "go 1.25.7" so it matches the existing
"toolchain go1.25.7" line and uses a released Go patch; ensure the go.mod
top-level directive now reads "go 1.25.7".

@qnen qnen merged commit 5ed6219 into main Feb 18, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants