xarmian 74bff149da chore(nix): update nixpkgs to a nixos-26.05 revision shipping go 1.26.7, clearing the 8 stdlib advisories from the Nix baseline (BUG-2085, BUG-2567) (#1500) ...

The Nix-built binary stayed on go 1.26.5 because the locked nixpkgs
shipped it and its Go builder pins GOTOOLCHAIN=local. nixos-26.05 now
ships go 1.26.7 (pkgs/development/compilers/go/1.26.nix at 1bc55b9d),
so the 8 stdlib advisories accepted for that lag are removed. The one
entry left, GO-2026-5932, is a deprecation advisory on x/crypto/openpgp
that can never clear: pad requires the module for bcrypt and does not
import openpgp. Its reason is corrected to say so.

Claude-Session: https://claude.ai/code/session_01RYiqbqXmxQMoKHsGm8B77N

2026-09-24 05:13:38 -04:00

..

accepted-advisories.txt

chore(nix): update nixpkgs to a nixos-26.05 revision shipping go 1.26.7, clearing the 8 stdlib advisories from the Nix baseline (BUG-2085, BUG-2567) (#1500)

2026-09-24 05:13:38 -04:00

bump-vendor-hash_test.sh

ci(nix): a Go bump's Nix check is green when the build passes, and main heals its own vendorHash (TASK-2954) (#1292)

2026-09-08 14:00:39 -04:00

bump-vendor-hash.sh

ci(nix): a Go bump's Nix check is green when the build passes, and main heals its own vendorHash (TASK-2954) (#1292)

2026-09-08 14:00:39 -04:00

heal-vendor-hash_test.sh

fix(nix): gate the vendorHash heal on state, not on the push range (BUG-2974) (#1303)

2026-09-09 10:52:14 -04:00

heal-vendor-hash.sh

feat(attachments): extension trust — the audio/video split, the text family, the CFB office trio and RTF (TASK-2976 / BUG-2963 PR B) (#1309)

2026-09-09 19:23:18 -04:00

package.nix

chore(nix): heal vendorHash for the module set in 4b1876ab6f (TASK-2954)

2026-09-21 18:08:31 +00:00

vulnscan.sh

ci(nix): gate the Nix-built binary with govulncheck (BUG-2567) (#1095)

2026-08-14 20:39:42 -04:00