amadan
go-1.26.10-emudhra
Human
Eight eMudhra intermediate CA keys were compromised on 2026-10-20 (https://emudhra.we-have-a-problem.com). Go 1.26.10 and 1.27.3 carry crypto/x509 security fixes. This branch raises go.mod's floor from 1.26 to 1.26.10 so no release can be built on an unpatched toolchain. Two follow-ons: a PROPOSED envelope-only census overlay (go.mod is in the root envelope; ruling asked in discussion 330), and a test-only fix to the plan9 SQL seal tests, whose fixed 1 MiB goroutine dump truncated in a full console run. CI green at 7f5d3c2b. Production gets the fix only once a release built with it is rolled out.
Commits
6
Files changed
4
+28 −7
Discussions
1
1 open
Tasks
3/6
done
Discussions 1 open
Tasks 3/6 done
- Install Go 1.26.10 on DOCS-T1 (~/.local/go-dist) Done
- Raise go.mod floor to 1.26.10 Done
- CI green on the branch Done
- Merge (Paul) Not started
- Release built with 1.26.10 and rolled: dev first, then flagship (Paul) Not started
Activity
- claude agent, operated by paul@keymail.dev replied to Census ruling: go-1.26.10 (envelope-only re-pin of '.' for the Go 1.26.10 floor)
- claude agent, operated by paul@keymail.dev pushed a2bc823ce Merge origin/main into go-1.26.10-emudhra
- claude agent, operated by paul@keymail.dev replied to Census ruling: go-1.26.10 (envelope-only re-pin of '.' for the Go 1.26.10 floor)
- claude agent, operated by paul@keymail.dev pushed b15b41bdf Merge origin/main into go-1.26.10-emudhra
- task updated: CI green on the branch
- claude agent, operated by paul@keymail.dev replied to Census ruling: go-1.26.10 (envelope-only re-pin of '.' for the Go 1.26.10 floor)
- claude agent, operated by paul@keymail.dev pushed 7f5d3c2b8 plan9 SQL seal tests: read the whole goroutine dump, not its first MiB
- claude agent, operated by paul@keymail.dev pushed 54f217fe6 DIAGNOSTIC (to be replaced): report the stack dump size when waitPlan9SealQueued times out
- claude agent, operated by paul@keymail.dev added task Census ruling on PROPOSED-go-1.26.10 (discussion 330)
- claude agent, operated by paul@keymail.dev opened Census ruling: go-1.26.10 (envelope-only re-pin of '.' for the Go 1.26.10 floor)
- claude agent, operated by paul@keymail.dev pushed 5afb65b27 census: re-pin the root envelope for go.mod's Go 1.26.10 floor
- task updated: Install Go 1.26.10 on DOCS-T1 (~/.local/go-dist)
- task updated: Raise go.mod floor to 1.26.10
- claude agent, operated by paul@keymail.dev added task Install Go 1.26.10 on DOCS-T1 (~/.local/go-dist)
- claude agent, operated by paul@keymail.dev added task Raise go.mod floor to 1.26.10
- claude agent, operated by paul@keymail.dev added task CI green on the branch
- claude agent, operated by paul@keymail.dev added task Merge (Paul)
- claude agent, operated by paul@keymail.dev added task Release built with 1.26.10 and rolled: dev first, then flagship (Paul)
- claude agent, operated by paul@keymail.dev pushed 445cdbe80 go.mod: require Go 1.26.10 for the eMudhra crypto/x509 fix