Skip to content

deps: update Go to 1.26.5 - #377

Merged
sosheskaz merged 1 commit into
mainfrom
ci/go-1-26-toolchain
Jul 30, 2026
Merged

deps: update Go to 1.26.5#377
sosheskaz merged 1 commit into
mainfrom
ci/go-1-26-toolchain

Conversation

@sosheskaz

@sosheskaz sosheskaz commented Jul 30, 2026

Copy link
Copy Markdown
Contributor

Updates the repository toolchain to Go 1.26.5 and golangci-lint 2.9.0. This is layer 1 of stack #379; #378 builds on it to re-enable prealloc after fixing the newly enforced findings.

Changes

  • Pins Go 1.26.5 in mise and both Go modules.
  • Pins the oldest golangci-lint release built with Go 1.26.
  • Temporarily disables prealloc for this independently buildable layer.

Validation

  • make build
  • make lint (0 issues)
  • go test ./coreweave/cks ./coreweave/inference ./coreweave/networking ./coreweave/object_storage
  • make generate (no generated diff)
  • git diff --check
  • govulncheck ./... using v1.1.4 rebuilt with Go 1.26.5

Caveats

The vulnerability scan reports five existing reachable findings in gRPC, x/text, AWS SDK v2, and x/net. Dependency remediation is intentionally outside this toolchain-only layer.

@sosheskaz
sosheskaz marked this pull request as ready for review July 30, 2026 17:37
@sosheskaz
sosheskaz requested a review from a team as a code owner July 30, 2026 17:37
Copilot AI review requested due to automatic review settings July 30, 2026 17:37

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the repository’s Go toolchain/linting configuration to align local tooling (mise) and module declarations with Go 1.26.5, and adjusts golangci-lint configuration to keep the toolchain bump independently buildable.

Changes:

  • Bump go version in both go.mod files to 1.26.5.
  • Update mise tool pins to Go 1.26.5 and golangci-lint 2.9.0.
  • Temporarily disable the prealloc linter in .golangci.yaml.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 1 comment.

File Description
tools/go.mod Updates tools module Go version to 1.26.5.
go.mod Updates provider module Go version to 1.26.5.
.golangci.yaml Temporarily disables prealloc in the enabled linters list.
.config/mise.toml Pins mise-managed Go and golangci-lint versions to the new toolchain.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread .golangci.yaml
- makezero
- nakedret
- prealloc
# - prealloc
@sosheskaz sosheskaz changed the title ci(mise): update Go toolchain deps: update Go to 1.26.5 Jul 30, 2026
@sosheskaz
sosheskaz merged commit 1e39f7a into main Jul 30, 2026
13 checks passed
@sosheskaz
sosheskaz deleted the ci/go-1-26-toolchain branch July 30, 2026 19:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants