From 978008218950cdf0b43cfe836f9f4de90b151e76 Mon Sep 17 00:00:00 2001
From: Rajeev Baliyan <20521486+rbaliyan@users.noreply.github.com>
Date: Fri, 8 May 2026 13:34:27 +0530
Subject: [PATCH] chore: bump Go to 1.26.3 and golangci-lint to 2.11.4

Addresses vulnerabilities in Go 1.25 by moving to 1.26.3.
Go 1.26.2 had GO-2026-4971 (net Dial/LookupPort panic on Windows
NUL byte), fixed in 1.26.3.

Updates golangci-lint to 2.11.4 for Go 1.26 compatibility.
CI workflows already use go-version-file: go.mod, so no
hardcoded Go versions in the action need updating.
---
 .github/workflows/ci.yml | 2 +-
 .mise.toml               | 4 ++--
 go.mod                   | 2 +-
 k8s/go.mod               | 2 +-
 4 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 4f80ef2..8111074 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -42,7 +42,7 @@ jobs:
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9
         with:
-          version: v2.8.0
+          version: v2.11.4
           args: --tests=false
 
   codeql:
diff --git a/.mise.toml b/.mise.toml
index 50341ce..0f3a8ef 100644
--- a/.mise.toml
+++ b/.mise.toml
@@ -1,6 +1,6 @@
 [tools]
-go = "1.25"
-golangci-lint = "2.8.0"
+go = "1.26.3"
+golangci-lint = "2.11.4"
 protoc = "latest"
 buf = "latest"
 just = "latest"
diff --git a/go.mod b/go.mod
index 0eb5385..08a6a68 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/rbaliyan/config
 
-go 1.25.9
+go 1.26.3
 
 require (
 	github.com/AdamKorcz/go-118-fuzz-build v0.0.0-20250520111509-a70c2aa677fa
diff --git a/k8s/go.mod b/k8s/go.mod
index 60aa8c7..903fab7 100644
--- a/k8s/go.mod
+++ b/k8s/go.mod
@@ -1,6 +1,6 @@
 module github.com/rbaliyan/config/k8s
 
-go 1.25.9
+go 1.26.3
 
 require (
 	github.com/rbaliyan/config v0.6.0