Skip to content

Go 1.27.3 と golang.org/x 依存を更新し、脆弱性を修正 - #71

Merged
kantacky merged 2 commits into
mainfrom
chore/go-1.27.3-security
Oct 22, 2026
Merged

kantacky merged 2 commits into
mainfrom
chore/go-1.27.3-security

Conversation

@kantacky

Copy link
Copy Markdown
Member

変更点

  • Go を 1.27.1 から 1.27.3 に更新した(go.mod / mise.toml / Dockerfile)
    • 1.27.3: crypto/x509 の CVE-2026-111943(侵害された中間 CA 鍵 8 件を拒否するよう修正)
    • 1.27.2: HTTP/2 サーバーの CVE-2026-97032 などを含む 15 件の脆弱性修正
  • golang.org/x/net を v0.57.0 から v0.61.0 に更新し、連動して x/crypto・x/sys・x/text・x/sync・x/mod・x/tools も更新した
  • 確認: go build ./... が成功すること

🤖 Generated with Claude Code

https://claude.ai/code/session_01Nm4sgr6VaLFEkzYEeWjCV2

kantacky and others added 2 commits October 22, 2026 15:54
crypto/x509 の CVE-2026-111943(侵害された中間 CA 鍵 8 件の拒否)と、
Go 1.27.2 で修正された HTTP/2 サーバーの CVE-2026-97032 などを含む
15 件の脆弱性修正を取り込むため、go.mod・mise.toml・Dockerfile の
Go バージョンを 1.27.1 から 1.27.3 に揃えて更新した。

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01Nm4sgr6VaLFEkzYEeWjCV2
10 月のセキュリティリリースで golang.org/x/net にも修正が入ったため、
x/net を v0.57.0 から v0.61.0 に上げ、連動して x/crypto・x/sys・
x/text・x/sync・x/mod・x/tools も更新した。

Co-Authored-By: Claude Opus 5.5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01Nm4sgr6VaLFEkzYEeWjCV2
@kantacky kantacky self-assigned this Oct 22, 2026
@cloudflare-workers-and-pages

Copy link
Copy Markdown

Deploying fun-dotto-server-docs with  Cloudflare Pages  Cloudflare Pages

Latest commit: bb18d50
Status: ✅  Deploy successful!
Preview URL: https://0535736f.fun-dotto-server-docs.pages.dev
Branch Preview URL: https://chore-go-1-27-3-security.fun-dotto-server-docs.pages.dev

View logs

@kantacky
kantacky marked this pull request as ready for review October 22, 2026 06:57
@kantacky
kantacky enabled auto-merge October 22, 2026 06:58
@kantacky
kantacky added this pull request to the merge queue Oct 22, 2026
Merged via the queue into main with commit 7e2f4d4 Oct 22, 2026
7 checks passed
@kantacky
kantacky deleted the chore/go-1.27.3-security branch October 22, 2026 07:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants