(skywalking-satellite) branch main updated: cves: bump go to 1.26.6 (#278)

[ke...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

kezhenxu94 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/skywalking-satellite.git


The following commit(s) were added to refs/heads/main by this push:
     new 46fd768  cves: bump go to 1.26.6 (#278)
46fd768 is described below

commit 46fd76846701dc6728901baf78cc644ffdbad7f7
Author: kezhenxu94 <ke...@apache.org>
AuthorDate: Tue Aug 18 22:35:02 2026 +0800

    cves: bump go to 1.26.6 (#278)
    
    Bumps the Go toolchain from 1.26.5 to 1.26.6 in docker/Dockerfile and the
    toolchain directive in go.mod to fix Go stdlib CVEs.
    
    Fixes CVE-2026-33818, CVE-2026-39821, CVE-2026-46600, CVE-2026-56853,
    CVE-2026-56858, CVE-2026-56859, CVE-2026-56860, CVE-2026-56862,
    CVE-2026-56864, CVE-2026-56865
    
    Co-authored-by: Security Agent <se...@tetrate.io>
---
 docker/Dockerfile | 2 +-
 go.mod            | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/docker/Dockerfile b/docker/Dockerfile
index 4eeab52..2f8b1f2 100644
--- a/docker/Dockerfile
+++ b/docker/Dockerfile
@@ -14,7 +14,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM golang:1.26.5 AS build
+FROM golang:1.26.6 AS build
 
 ARG VERSION="latest"
 ARG TARGETARCH
diff --git a/go.mod b/go.mod
index 7366b10..cb02c5c 100644
--- a/go.mod
+++ b/go.mod
@@ -2,7 +2,7 @@ module github.com/apache/skywalking-satellite
 
 go 1.26.0
 
-toolchain go1.26.5
+toolchain go1.26.6
 
 require (
 	github.com/Shopify/sarama v1.27.2