Dev Scribe 9562717ec5 Bump golang.org/x/net to v0.60.0 ...

govulncheck reports reachable x/net HTTP/2 vulnerabilities
GO-2026-6617, GO-2026-6612, GO-2026-6611, GO-2026-6610 and
GO-2026-6603, all fixed in golang.org/x/net v0.60.0.

x/net v0.60.0 requires go 1.26, so the go directive moves to 1.26.0.

x/net v0.60.0 deprecates http2.ConfigureTransports and the
http2.Transport ReadIdleTimeout/PingTimeout fields (staticcheck
SA1019). Configure the same DoH HTTP/2 health check through
http.Transport.HTTP2: SendPingTimeout 10s and PingTimeout 5s. Add a
test that silences an HTTP/2 peer and requires the transport to close
the connection.

2026-10-12 14:39:50 +07:00

..

Dockerfile

Bump golang.org/x/net to v0.60.0

2026-10-12 14:39:50 +07:00

Dockerfile.debug

Bump golang.org/x/net to v0.60.0

2026-10-12 14:39:50 +07:00