Skip to content

Security: fix dependency vulnerabilities - #23

Merged
NazmusSayad merged 3 commits into
mainfrom
security/dependency-audit
Oct 7, 2026
Merged

NazmusSayad merged 3 commits into
mainfrom
security/dependency-audit

Conversation

@TheoBen880

Copy link
Copy Markdown
Contributor

Moves CI and the Docker builder from Go 1.23, which is no longer supported, to Go 1.25.

  • CI: go-version changes from '1.23' to '1.25'.
  • Dockerfile: builder changes from golang:1.23-alpine to golang:1.25-alpine, and runtime from alpine:3.20 (end of life) to alpine:3.24.
  • Build, vet and tests pass with Go 1.25.14. govulncheck now reports 0 vulnerabilities, down from 31 reachable Go standard library vulnerabilities on 1.23.
  • trivy, builder image: 22 Critical / 439 High → 0 / 2.

@NazmusSayad
NazmusSayad merged commit 2720841 into main Oct 7, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants