Update Go baseline for certificate-validation security fixes

.github/workflows/ci.yml

@@ -38,7 +38,7 @@ jobs:
         uses: actions/setup-go@v7
         with:
           # Keep CI on the patched standard library release reported by govulncheck.
-          go-version: '1.26.9'
+          go-version: '1.26.10'
           cache: true
 
       - name: Check formatting

.github/workflows/codeql.yml

@@ -37,7 +37,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version: '1.26.9'
+          go-version: '1.26.10'
           cache: true
 
       - name: Initialize CodeQL

CONTRIBUTING.md

@@ -13,7 +13,7 @@ review and maintain.
 
 ## Local checks
 
-GoBot targets Go `1.26.9+` (or `1.27.2+` for the Go 1.27 series).
+GoBot targets Go `1.26.10+` (or `1.27.3+` for the Go 1.27 series).
 Before opening a pull request:
 
 ```sh

Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM golang:1.26.9-alpine AS builder
+FROM golang:1.26.10-alpine AS builder
 WORKDIR /src
 COPY go.mod go.sum ./
 RUN --mount=type=cache,target=/go/pkg/mod \

README.md

@@ -6,7 +6,7 @@
 
 [![GoBot CI](https://github.com/variablenix/GoBot/actions/workflows/ci.yml/badge.svg?branch=main)](https://github.com/variablenix/GoBot/actions/workflows/ci.yml)
 [![CodeQL](https://github.com/variablenix/GoBot/actions/workflows/codeql.yml/badge.svg?branch=main)](https://github.com/variablenix/GoBot/actions/workflows/codeql.yml)
-[![Go 1.26.9+](https://img.shields.io/badge/Go-1.26.9%2B-00ADD8?logo=go&logoColor=white)](go.mod)
+[![Go 1.26.10+](https://img.shields.io/badge/Go-1.26.10%2B-00ADD8?logo=go&logoColor=white)](go.mod)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](LICENSE)
 
 GoBot is an extensible Go IRC bot for long-running use on one or more IRC
@@ -53,7 +53,7 @@ are also persisted so they survive restarts.
 
 Requirements:
 
-- Go `1.26.9+` (or `1.27.2+` when using the Go 1.27 series)
+- Go `1.26.10+` (or `1.27.3+` when using the Go 1.27 series)
 - IRC network access
 - a writable data directory
 

docs/deployment.md

@@ -5,7 +5,7 @@ systemd service, and using Docker.
 
 ## Requirements
 
-- Go `1.26.9+` (or `1.27.2+` when using the Go 1.27 series)
+- Go `1.26.10+` (or `1.27.3+` when using the Go 1.27 series)
 - a writable filesystem for the BoltDB database
 - network access to the IRC servers
 - optionally, Docker and Docker Compose
@@ -42,10 +42,10 @@ make test
 Configuration-only changes require a restart. Code changes require a new
 build before restarting.
 
-Use a patched Go toolchain when rebuilding: Go 1.26.9 and 1.27.2 contain
-standard-library security fixes that are not supplied by updating modules
+Use a patched Go toolchain when rebuilding: Go 1.26.10 and 1.27.3 contain
+certificate-validation security fixes that are not supplied by updating modules
 alone. An existing binary retains its old standard library until it is rebuilt
-and the service is restarted. CI and the Docker builder use Go 1.26.9.
+and the service is restarted. CI and the Docker builder use Go 1.26.10.
 
 ## First-run workflow
 

go.mod

@@ -1,6 +1,6 @@
 module github.com/variablenix/GoBot
 
-go 1.26.9
+go 1.26.10
 
 require (
 	github.com/agnivade/levenshtein v1.2.1