Skip to content

Upgrade to Go 1.27.3 - #308

Draft
tnsardesai wants to merge 1 commit into
mainfrom
hypeship/go-1.27.3
Draft

tnsardesai wants to merge 1 commit into
mainfrom
hypeship/go-1.27.3

Conversation

@tnsardesai

Copy link
Copy Markdown
Contributor

Summary

Moves the repo from Go 1.27.2 to Go 1.27.3.

Go 1.27.3 is a security release with one fix: crypto/x509 stops trusting certificate chains through eight eMudhra intermediates whose private keys were compromised (CVE-2026-111943). Binaries built with go1.27.2 accept those chains whenever the CA bundle they run with predates the 2026-10-20 trust-store updates. There are no API or GODEBUG changes between 1.27.2 and 1.27.3.

The latest release, v0.50.0 (2026-10-26), was built with go1.27.2 and runs on customer machines with their API keys. Cut a release after merging so users get a 1.27.3 build.

Changes

  • go.mod: go 1.27.2 -> go 1.27.3; the release workflow reads go-version-file: go.mod
  • AGENTS.md: required Go version

go mod tidy changed nothing else.

Verification

  • go build ./..., go vet ./... and go test -short ./...: 9/9 packages pass on unmodified go1.27.3, the same as main on go1.27.2.
  • gofmt -l reports the same files on main with go1.27.2 as with go1.27.3, so this change adds no formatting drift.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant