mirror of
https://github.com/go-admin-team/go-admin.git
synced 2026-09-25 11:31:47 +00:00
govulncheck reports seven standard-library vulnerabilities against go1.26.5 that this code actually reaches, and none against go1.27.1. It also clears the way for the next go-admin-core release, which declares go 1.27.1: a module cannot require a dependency whose language version is newer than its own. Doing it in its own commit keeps that upgrade to a one-line dependency bump. All three modules in the tree move together. test/e2e-apporder requires the main module, so leaving it behind fails the moment the main module declares a newer version - "updates to go.mod needed", before a test runs. example/app-order only requires go-admin-core and would still have resolved, but it was declaring 1.25.13, two releases back and out of support. The workflows pin the Go version explicitly instead of reading go.mod, and the four READMEs state it under environmental requirements, so those move with it too. No dependency changes - go mod tidy leaves every go.sum untouched.