From af74a29de395c4a639065c318395226865143b54 Mon Sep 17 00:00:00 2001 From: Dave Page Date: Tue, 27 Oct 2026 16:35:49 +0000 Subject: [PATCH] fix: bump Go to 1.26.10 for the eMudhra CA distrust (CVE-2026-111943) --- cmd/compactor/go.mod | 2 +- docs/installation.md | 2 +- examples/walkthrough/Dockerfile.archiver | 2 +- go.mod | 2 +- 4 files changed, 4 insertions(+), 4 deletions(-) diff --git a/cmd/compactor/go.mod b/cmd/compactor/go.mod index 45f7ef9b..da7a6324 100644 --- a/cmd/compactor/go.mod +++ b/cmd/compactor/go.mod @@ -1,6 +1,6 @@ module github.com/pgedge/coldfront/cmd/compactor -go 1.26.5 +go 1.26.10 require ( github.com/apache/arrow-go/v18 v18.8.0 diff --git a/docs/installation.md b/docs/installation.md index 9deaf814..c9925d48 100644 --- a/docs/installation.md +++ b/docs/installation.md @@ -180,7 +180,7 @@ The following table lists the prerequisites for each build path: | For | You need | |---|---| | Docker build (below) | Docker, network access (GitHub, ghcr.io, quay.io, curl.se, and the distribution's RPM repositories), a few GB of disk and RAM, and 30-60 minutes for the base compile. | -| The archiver and partitioner (all paths) | Go 1.26.5+ (pinned in [go.mod](https://github.com/pgEdge/ColdFront/blob/main/go.mod)) and `make` (`make build` produces `./bin/archiver` and `./bin/partitioner`). | +| The archiver and partitioner (all paths) | Go 1.26.10+ (pinned in [go.mod](https://github.com/pgEdge/ColdFront/blob/main/go.mod)) and `make` (`make build` produces `./bin/archiver` and `./bin/partitioner`). | | The compactor and the CI gate | golangci-lint for `make compactor`; `./run-ci-local.sh` also needs Docker and mkdocs with mkdocs-material. | | Bare metal (near the end of this section) | `pg_config`, PostgreSQL server dev headers, libpq client headers and library (libpq-dev / libpq-devel), `make`, and `gcc`. | diff --git a/examples/walkthrough/Dockerfile.archiver b/examples/walkthrough/Dockerfile.archiver index 87982076..65b4cf78 100644 --- a/examples/walkthrough/Dockerfile.archiver +++ b/examples/walkthrough/Dockerfile.archiver @@ -1,7 +1,7 @@ # Builds the ColdFront archiver + partitioner (CGO-free static Go binaries) for # the walkthrough. Build context is the repo root (see compose). Lean: only the # two thin SQL-orchestrator commands and the shared internal packages. -FROM golang:1.26-alpine AS build +FROM golang:1.26.10-alpine AS build WORKDIR /src COPY go.mod go.sum ./ RUN go mod download diff --git a/go.mod b/go.mod index 834e42e4..42a30f24 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/pgedge/coldfront -go 1.26.5 +go 1.26.10 require ( github.com/jackc/pgx/v5 v5.11.0