diff options
| author | Lukasz Kasprzak <lukas@labunix.xyz> | 2026-09-14 19:35:46 +0200 |
|---|---|---|
| committer | Lukasz Kasprzak <lukas@labunix.xyz> | 2026-09-14 19:35:46 +0200 |
| commit | 5b22b8e3a7d1ae9a3fcc4e894ae2e9d142bf8086 (patch) | |
| tree | ff3de84061e15d7360e0fe839954e1b4257d28c1 /Makefile | |
| parent | e94e107071223b2504963dfa95ccd1f2293da752 (diff) | |
| download | krino-5b22b8e3a7d1ae9a3fcc4e894ae2e9d142bf8086.tar.gz krino-5b22b8e3a7d1ae9a3fcc4e894ae2e9d142bf8086.zip | |
go 1.25, toolchain go1.26.8, x/text v0.41.0: fixes GO-2026-5970 and the reachable stdlib vulnerabilities
Diffstat (limited to 'Makefile')
| -rw-r--r-- | Makefile | 6 |
1 files changed, 3 insertions, 3 deletions
@@ -94,10 +94,10 @@ fuzz: ## run every fuzz target for FUZZTIME each (default 20s); a crasher is sav race: ## run the tests under the race detector (needs cgo and a C compiler) CGO_ENABLED=1 go test -race ./... -# govulncheck v1.1.4 is the newest release that builds with Go 1.24 -# (v1.2.0 and later need Go 1.25); GOTOOLCHAIN=local stops a toolchain download. +# govulncheck is pinned; it runs on the toolchain go.mod names, so the +# standard library it checks is the one release builds use. vulncheck: ## check the standard library and dependencies against the Go vulnerability database (network) - GOTOOLCHAIN=local go run golang.org/x/vuln/cmd/govulncheck@v1.1.4 ./... + go run golang.org/x/vuln/cmd/govulncheck@v1.8.0 ./... cross: ## cross-compile linux/amd64, linux/arm64, freebsd/amd64, openbsd/amd64 into dist/krino-$(VERSION)-<os>-<arch>/ @case '$(VERSION)' in \ |