Preserve the current upstream Go security toolchain and dependency repair

Compose the exact observed upstream additively without rewriting reviewed tip 805ea6d712 or any accepted ancestry. The new Go 1.26.9 and x/net graph need matching final-source evidence before this batch can be proposed.

Change-source: pulse-maintainer
This commit is contained in:
pulse-triage[bot]
2026-10-11 23:42:21 +01:00
21 changed files with 46 additions and 40 deletions
+1 -1
View File
@@ -35,7 +35,7 @@ jobs:
fetch-depth: 0
- uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
with:
go-version: '1.26.8'
go-version: '1.26.9'
cache: false
- name: Collect fixed exact-pair root evidence
run: python3 scripts/diagnose-root-pair.py --output root-pair-evidence