ci: build with Go 1.27.3 to fix CVE-2026-111943

.github/workflows/chatops-pr-test-gate.yml

@@ -104,10 +104,10 @@ jobs:
     permissions:
       contents: read
     steps:
-      - name: Set up Go 1.26.0
+      - name: Set up Go 1.27.3
         uses: actions/setup-go@v7
         with:
-          go-version: 1.26.0
+          go-version: 1.27.3
         id: go
       - name: Check out pinned PR head
         uses: actions/checkout@v7
@@ -156,10 +156,10 @@ jobs:
     permissions:
       contents: read
     steps:
-      - name: Set up Go 1.26.0
+      - name: Set up Go 1.27.3
         uses: actions/setup-go@v7
         with:
-          go-version: 1.26.0
+          go-version: 1.27.3
         id: go
       - name: Check out pinned PR head
         uses: actions/checkout@v7

.github/workflows/cloud-integration-tests.yml

@@ -26,10 +26,10 @@ jobs:
       matrix:
         os: [macos-latest, ubuntu-latest]
     steps:
-      - name: Set up Go 1.26.0
+      - name: Set up Go 1.27.3
         uses: actions/setup-go@v7
         with:
-          go-version: 1.26.0
+          go-version: 1.27.3
         id: go
       - name: Check out code into the Go module directory
         uses: actions/checkout@v7
@@ -69,10 +69,10 @@ jobs:
     name: Cloud Integration Tests Windows
     runs-on: windows-latest
     steps:
-      - name: Set up Go 1.26.0
+      - name: Set up Go 1.27.3
         uses: actions/setup-go@v7
         with:
-          go-version: 1.26.0
+          go-version: 1.27.3
         id: go
       - name: Check out code into the Go module directory
         uses: actions/checkout@v7

.github/workflows/gitea-integration-tests.yml

@@ -11,7 +11,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version: "1.26.0"
+          go-version: "1.27.3"
       - name: Check out code
         uses: actions/checkout@v7
       - name: Install Go dependencies and build the project

.github/workflows/gitlab-ee-integration-tests.yml

@@ -11,7 +11,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version: "1.26.0"
+          go-version: "1.27.3"
       - name: Check out code
         uses: actions/checkout@v7
       - name: Install Go dependencies and build the project

.github/workflows/go-build-test.yml

@@ -17,10 +17,10 @@ jobs:
       matrix:
         os: [macos-latest, ubuntu-latest]
     steps:
-      - name: Set up Go 1.26.0
+      - name: Set up Go 1.27.3
         uses: actions/setup-go@v7
         with:
-          go-version: 1.26.0
+          go-version: 1.27.3
         id: go
       - name: Check out code into the Go module directory
         uses: actions/checkout@v7
@@ -32,10 +32,10 @@ jobs:
     name: Build and Test Windows
     runs-on: windows-latest
     steps:
-      - name: Set up Go 1.26.0
+      - name: Set up Go 1.27.3
         uses: actions/setup-go@v7
         with:
-          go-version: 1.26.0
+          go-version: 1.27.3
         id: go
       - name: Check out code into the Go module directory
         uses: actions/checkout@v7

.github/workflows/golangci-lint.yml

@@ -20,8 +20,8 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version: 1.26.0
+          go-version: 1.27.3
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v9
         with:
-          version: v2.12.2
+          version: v2.15.0

.github/workflows/goreleaser.yml

@@ -22,7 +22,7 @@ jobs:
         name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version: "1.26.0"
+          go-version: "1.27.3"
       -
         name: Run GoReleaser
         uses: goreleaser/goreleaser-action@v7

.github/workflows/verify-vendor.yml

@@ -23,7 +23,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v7
         with:
-          go-version-file: go.mod
+          go-version: "1.27.3"
           cache: true
 
       - name: Verify go.mod and go.sum

CHANGELOG.md

@@ -12,6 +12,7 @@ The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 ### Removed
 ### Fixed
 ### Security
+- Build with Go 1.27.3 to fix CVE-2026-111943 in `crypto/x509`
 
 ## [1.11.16] - 10/3/26
 ### Added

Dockerfile

@@ -1,7 +1,7 @@
 # ==================================================
 # Build image
 # ==================================================
-FROM golang:alpine AS build-image
+FROM golang:1.27.3-alpine AS build-image
 
 # ENV GO111MODULE=on
 ENV CGO_ENABLED=0

go.mod

@@ -2,6 +2,8 @@ module github.com/gabrie30/ghorg
 
 go 1.26.0
 
+toolchain go1.27.3
+
 require (
 	code.gitea.io/sdk/gitea v0.25.1
 	github.com/Klaus-Tockloth/go-term-markdown v0.0.0-20250129073703-91600624167c