Skip to content

v2.35.1 - #829

Merged
hillna merged 1 commit into
mainfrom
fix/cve-2026-39821-go-1.26.6
Aug 26, 2026
Merged

v2.35.1#829
hillna merged 1 commit into
mainfrom
fix/cve-2026-39821-go-1.26.6

Conversation

@hillna

@hillna hillna commented Aug 26, 2026

Copy link
Copy Markdown
Collaborator

Summary

Rebuild dbmate with Go 1.26.6 to address CVE-2026-39821 (GO-2026-5026).

Changes

  • Bump toolchain in go.mod to go1.26.6
  • Bump dev Dockerfile base image to golang:1.26.6
  • Version bump to 2.35.1

Test plan

  • CI passes
  • Tag v2.35.1 after merge to publish npm + Docker images
  • Foxglove app PR bumps to dbmate@2.35.1 (blocked on this release)

Made with Cursor

Rebuild with Go 1.26.6 to address CVE-2026-39821.

Co-authored-by: Cursor <cursoragent@cursor.com>
@hillna
hillna marked this pull request as ready for review August 26, 2026 17:28
@hillna
hillna merged commit b735560 into main Aug 26, 2026
11 checks passed
@hillna
hillna deleted the fix/cve-2026-39821-go-1.26.6 branch August 26, 2026 17:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant