mirror of
https://github.com/anchore/syft.git
synced 2026-10-28 08:24:40 +08:00
Alex Goodman
1c4d672b28
* chore: let go-make own the go version Drops syft's own Go version pin so CI and releases use go-make setup's default. The pin predates the go-make port (#4773, carried through #4923) and had to be kept in sync in four places. - removes the `go-version` input from `.github/actions/bootstrap` and the three `go-version: "1.26.2"` overrides in `validations.yaml` - builds move from Go 1.26 to go-make's default (currently `1.27.2`). `go.mod` stays at `go 1.26.8`, so nothing changes for library consumers - this is groundwork for the emSign/eMudhra CA fix: Go `1.27.3` distrusts the compromised intermediates in `crypto/x509`. anchore/go-make#170 bumps the default, and the go-make pin here gets bumped once that is released. The `v1.55.0` images also still carry `emSign ECC Root CA - G3`, so a release is needed after the bump Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> * chore: reformat generated license list with go 1.27 gofmt go 1.27 gofmt aligns long map keys differently, so the json schema drift check rewrote this file. Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com> --------- Signed-off-by: Alex Goodman <wagoodman@users.noreply.github.com>