6 Commits

Author SHA1 Message Date
Sacha Al Himdani
ed9cdb4847 Update Go to 1.26.5 to fix stdlib CVEs
Bump the Go toolchain from 1.26.4 to 1.26.5 to address CVE-2026-42505
(ECH handshake de-anonymization) and CVE-2026-39822 (os.Root symlink
following on Unix).

Signed-off-by: Sacha Al Himdani <sacha@probo.com>
2026-07-09 11:13:32 +02:00
Émile Ré
8a53e0ec1c CI npm version should respect engines field
Signed-off-by: Émile Ré <emile@probo.com>
2026-06-15 15:26:26 +02:00
Émile Ré
2221dc688a Upgrade go to 1.26.4
Signed-off-by: Émile Ré <emile@probo.com>
2026-06-03 16:39:43 +02:00
Émile Ré
ba918c01ab Upgrade go to 1.26.3
Signed-off-by: Émile Ré <emile@getprobo.com>
2026-05-08 13:46:14 +04:00
Sacha Al Himdani
96cfbe19d8 Bump Go from 1.26.1 to 1.26.2
Address security vulnerabilities fixed in Go 1.26.2.

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
2026-04-08 09:43:13 +02:00
Bryan Frimin
7e685a2e96 Rewrite CI/CD pipeline
Signed-off-by: Bryan Frimin <bryan@getprobo.com>
2026-04-03 20:14:38 +02:00