v1.11.1

kb v1.11.1

v1.11.1 corrects the build toolchain to Go 1.26.5, the required maximum.
It retains the application fixes and scoped-label behavior from v1.11.0.
The immutable v1.11.0 binaries were built with Go 1.26.8 and do not meet
this toolchain restriction.

Accepted Go vulnerabilities

The maintainer explicitly accepts vulnerabilities caused by the required
Go 1.26.5 standard library. These findings are reported during CI and release
verification. They are accepted risk, not fixed vulnerabilities.

The pinned govulncheck v1.8.0 gate accepts standard-library findings only
for Go 1.26.5. It still rejects reachable third-party vulnerabilities,
scanner errors, and an unexpected toolchain.

The Go 1.26.5 scan reported seven reachable standard-library findings:
GO-2026-5026, GO-2026-5972, GO-2026-6088, GO-2026-6089, GO-2026-6090,
GO-2026-6091, and GO-2026-6218. It reported no reachable third-party findings.
The fixed Go version for these findings is 1.26.6, above the required maximum.

Verification

Builds and tests use Go 1.26.5 exactly. The existing full-suite, native-platform,
migration, and startup checks remain in place, with their documented platform
and short-mode skips. No physical-terminal validation is claimed.

The release ticket
records the candidate checks, release dry run, published tag, and artifact
verification. The original readiness fixes and remaining audit backlog are
listed in the v1.11.0 notes.

Upgrade

Make a cold backup of the data directory first. With Go 1.26.5 installed:

GOTOOLCHAIN=local go install github.com/RandomCodeSpace/kb@v1.11.1
kb version

The release provides CGO-free binaries built with Go 1.26.5 for Linux amd64
and arm64, macOS amd64 and arm64, and Windows amd64.