From 3dc1813ec8fe07812dcba81ef61859c1f594e4bc Mon Sep 17 00:00:00 2001 From: JeanExtreme002 Date: Fri, 9 Oct 2026 14:58:15 -0300 Subject: [PATCH] fix(go): clear the govulncheck findings and track supported Go releases The 1.26.x leg resolved to Go 1.26.8 from the runner toolcache while the nine standard library findings are fixed in 1.26.9, released today. setup-go now runs with check-latest so a patch release is picked up as soon as it ships. golang.org/x/net moves from v0.58.0 to v0.61.0 (fixed from v0.60.0). Every patched x/net requires go 1.26.0, so the module directive follows and the matrix becomes 1.26.x / 1.27.x. Go 1.25 stopped receiving security fixes when 1.27 shipped, so nothing supported is dropped. Static analysis stays on the 1.26.x leg: staticcheck v0.8.1 cannot read Go 1.27 export data yet. --- .github/workflows/go-package.yml | 7 ++++--- README.md | 2 +- docs/index.md | 2 +- go/Makefile | 2 +- go/README.md | 2 +- go/go.mod | 6 +++--- go/go.sum | 8 ++++---- nodejs/README.md | 2 +- 8 files changed, 16 insertions(+), 15 deletions(-) diff --git a/.github/workflows/go-package.yml b/.github/workflows/go-package.yml index 447b365..7fce40e 100644 --- a/.github/workflows/go-package.yml +++ b/.github/workflows/go-package.yml @@ -29,13 +29,14 @@ jobs: strategy: fail-fast: false matrix: - go-version: ['1.25.x', '1.26.x'] + go-version: ['1.26.x', '1.27.x'] steps: - uses: actions/checkout@11d5960a326750d5838078e36cf38b85af677262 # v4 - name: Set up Go ${{ matrix.go-version }} uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 with: go-version: ${{ matrix.go-version }} + check-latest: true # the toolcache lags patch releases govulncheck expects cache-dependency-path: go/go.sum - name: Download dependencies run: | @@ -48,7 +49,7 @@ jobs: - name: Lint run: make lint - name: Static analysis - if: matrix.go-version == '1.26.x' + if: matrix.go-version == '1.26.x' # staticcheck v0.8.1 cannot read Go 1.27 export data run: make lint-strict - name: Offline tests (PR gate) # Coverage threshold lives in the Makefile ($(COVERAGE_MIN)); raise it @@ -64,7 +65,7 @@ jobs: command: cd go && make test-integration continue-on-error: ${{ github.event_name == 'push' }} - name: Vulnerability scan (shipped dependencies) - if: matrix.go-version == '1.26.x' + if: matrix.go-version == '1.27.x' run: make security - name: Verify the package builds as a dependency run: | diff --git a/README.md b/README.md index 2bab231..19a4351 100644 --- a/README.md +++ b/README.md @@ -14,7 +14,7 @@ This SDK should only be used for your own educational purposes. If you are inter [![Npm](https://img.shields.io/npm/v/flightradarapi?logo=npm&color=red)](https://www.npmjs.com/package/flightradarapi) [![Node Version](https://img.shields.io/badge/node-18.17+-339933)](https://www.npmjs.com/package/flightradarapi) [![Go Reference](https://pkg.go.dev/badge/github.com/JeanExtreme002/FlightRadarAPI/go.svg)](https://pkg.go.dev/github.com/JeanExtreme002/FlightRadarAPI/go/flightradarapi) -[![Go Version](https://img.shields.io/badge/go-1.25+-00ADD8)](https://go.dev/dl/) +[![Go Version](https://img.shields.io/badge/go-1.26+-00ADD8)](https://go.dev/dl/) [![Downloads](https://static.pepy.tech/personalized-badge/flightradarapi?period=total&units=international_system&left_color=grey&right_color=orange&left_text=downloads)](https://pypi.org/project/FlightRadarAPI/) [![Frequency](https://img.shields.io/pypi/dm/flightradarapi?style=flat&label=frequency)](https://pypi.org/project/FlightRadarAPI/) diff --git a/docs/index.md b/docs/index.md index db36a63..65225ff 100644 --- a/docs/index.md +++ b/docs/index.md @@ -15,7 +15,7 @@ See more information at [Flightradar24's terms and conditions](https://www.fligh [![Npm](https://img.shields.io/npm/v/flightradarapi?logo=npm&color=red)](https://www.npmjs.com/package/flightradarapi) [![Node Version](https://img.shields.io/badge/node-18.17+-339933)](https://www.npmjs.com/package/flightradarapi) [![Go Reference](https://pkg.go.dev/badge/github.com/JeanExtreme002/FlightRadarAPI/go.svg)](https://pkg.go.dev/github.com/JeanExtreme002/FlightRadarAPI/go/flightradarapi) -[![Go Version](https://img.shields.io/badge/go-1.25+-00ADD8)](https://go.dev/dl/) +[![Go Version](https://img.shields.io/badge/go-1.26+-00ADD8)](https://go.dev/dl/) [![Downloads](https://static.pepy.tech/personalized-badge/flightradarapi?period=total&units=international_system&left_color=grey&right_color=orange&left_text=downloads)](https://pypi.org/project/FlightRadarAPI/) [![Frequency](https://img.shields.io/pypi/dm/flightradarapi?style=flat&label=frequency)](https://pypi.org/project/FlightRadarAPI/) diff --git a/go/Makefile b/go/Makefile index 2d22e3d..5caec57 100644 --- a/go/Makefile +++ b/go/Makefile @@ -115,7 +115,7 @@ tidy: # Uses govulncheck, the same tool the CI workflow runs. A finding in the # standard library means the local toolchain is behind, not that this package -# is: CI resolves 1.26.x to the newest patch and sees none. +# is: CI resolves 1.27.x to the newest patch and sees none. .PHONY: security security: @echo "$(GREEN)Running vulnerability scan (govulncheck)...$(NC)" diff --git a/go/README.md b/go/README.md index 17cabf9..618b070 100644 --- a/go/README.md +++ b/go/README.md @@ -12,7 +12,7 @@ This SDK should only be used for your own educational purposes. If you are inter [![Npm](https://img.shields.io/npm/v/flightradarapi?logo=npm&color=red)](https://www.npmjs.com/package/flightradarapi) [![Node Version](https://img.shields.io/badge/node-18.17+-339933)](https://www.npmjs.com/package/flightradarapi) [![Go Reference](https://pkg.go.dev/badge/github.com/JeanExtreme002/FlightRadarAPI/go.svg)](https://pkg.go.dev/github.com/JeanExtreme002/FlightRadarAPI/go/flightradarapi) -[![Go Version](https://img.shields.io/badge/go-1.25+-00ADD8)](https://go.dev/dl/) +[![Go Version](https://img.shields.io/badge/go-1.26+-00ADD8)](https://go.dev/dl/) [![Downloads](https://static.pepy.tech/personalized-badge/flightradarapi?period=total&units=international_system&left_color=grey&right_color=orange&left_text=downloads)](https://pypi.org/project/FlightRadarAPI/) [![Frequency](https://img.shields.io/pypi/dm/flightradarapi?style=flat&label=frequency)](https://pypi.org/project/FlightRadarAPI/) diff --git a/go/go.mod b/go/go.mod index 34838a6..5334888 100644 --- a/go/go.mod +++ b/go/go.mod @@ -1,9 +1,9 @@ module github.com/JeanExtreme002/FlightRadarAPI/go -go 1.25.0 +go 1.26.0 require ( github.com/andybalholm/brotli v1.2.2 - golang.org/x/net v0.58.0 - golang.org/x/text v0.41.0 + golang.org/x/net v0.61.0 + golang.org/x/text v0.43.0 ) diff --git a/go/go.sum b/go/go.sum index 6ecbbf0..20f6b83 100644 --- a/go/go.sum +++ b/go/go.sum @@ -2,7 +2,7 @@ github.com/andybalholm/brotli v1.2.2 h1:HzTuoo2ErYQqf5qvcJInB8uvqSVxRttzkFexPWtn github.com/andybalholm/brotli v1.2.2/go.mod h1:rzTDkvFWvIrjDXZHkuS16NPggd91W3kUSvPlQ1pLaKY= github.com/xyproto/randomstring v1.0.5 h1:YtlWPoRdgMu3NZtP45drfy1GKoojuR7hmRcnhZqKjWU= github.com/xyproto/randomstring v1.0.5/go.mod h1:rgmS5DeNXLivK7YprL0pY+lTuhNQW3iGxZ18UQApw/E= -golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To= -golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU= -golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8= -golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M= +golang.org/x/net v0.61.0 h1:RR+6j/BTBCrggOLugxa+66R8FvoN6MHlzDlZIbN9YFw= +golang.org/x/net v0.61.0/go.mod h1:WgDCOTH8iwtB66T4/GfI94AHo/hhdb7Hah9NDseQfiI= +golang.org/x/text v0.43.0 h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc= +golang.org/x/text v0.43.0/go.mod h1:hbSIYA/amXcRXTFSZqh8tWHEoqRvvbKPJ2uz/KU+a+s= diff --git a/nodejs/README.md b/nodejs/README.md index d290dd5..ccf63be 100644 --- a/nodejs/README.md +++ b/nodejs/README.md @@ -12,7 +12,7 @@ This SDK should only be used for your own educational purposes. If you are inter [![Npm](https://img.shields.io/npm/v/flightradarapi?logo=npm&color=red)](https://www.npmjs.com/package/flightradarapi) [![Node Version](https://img.shields.io/badge/node-18.17+-339933)](https://www.npmjs.com/package/flightradarapi) [![Go Reference](https://pkg.go.dev/badge/github.com/JeanExtreme002/FlightRadarAPI/go.svg)](https://pkg.go.dev/github.com/JeanExtreme002/FlightRadarAPI/go/flightradarapi) -[![Go Version](https://img.shields.io/badge/go-1.25+-00ADD8)](https://go.dev/dl/) +[![Go Version](https://img.shields.io/badge/go-1.26+-00ADD8)](https://go.dev/dl/) [![Downloads](https://static.pepy.tech/personalized-badge/flightradarapi?period=total&units=international_system&left_color=grey&right_color=orange&left_text=downloads)](https://pypi.org/project/FlightRadarAPI/) [![Frequency](https://img.shields.io/pypi/dm/flightradarapi?style=flat&label=frequency)](https://pypi.org/project/FlightRadarAPI/)