aboutsummaryrefslogtreecommitdiff
path: root/Makefile
diff options
context:
space:
mode:
Diffstat (limited to 'Makefile')
-rw-r--r--Makefile6
1 files changed, 3 insertions, 3 deletions
diff --git a/Makefile b/Makefile
index e09a3be..d103ab5 100644
--- a/Makefile
+++ b/Makefile
@@ -94,10 +94,10 @@ fuzz: ## run every fuzz target for FUZZTIME each (default 20s); a crasher is sav
race: ## run the tests under the race detector (needs cgo and a C compiler)
CGO_ENABLED=1 go test -race ./...
-# govulncheck v1.1.4 is the newest release that builds with Go 1.24
-# (v1.2.0 and later need Go 1.25); GOTOOLCHAIN=local stops a toolchain download.
+# govulncheck is pinned; it runs on the toolchain go.mod names, so the
+# standard library it checks is the one release builds use.
vulncheck: ## check the standard library and dependencies against the Go vulnerability database (network)
- GOTOOLCHAIN=local go run golang.org/x/vuln/cmd/govulncheck@v1.1.4 ./...
+ go run golang.org/x/vuln/cmd/govulncheck@v1.8.0 ./...
cross: ## cross-compile linux/amd64, linux/arm64, freebsd/amd64, openbsd/amd64 into dist/krino-$(VERSION)-<os>-<arch>/
@case '$(VERSION)' in \