[renovate]

This PR contains the following updates:

Package	Type	Update	Change
go	tools	patch	1.27.2 → 1.27.3
go (source)	toolchain	patch	1.27.2 → 1.27.3
golangci-lint	tools	minor	2.14.0 → 2.15.0

---

Distrust compromised intermediate certificates in crypto/x509

CVE-2026-111943 / GO-2026-6809 / RUSTSEC-2026-0381 / RUSTSEC-2026-0382 / RUSTSEC-2026-0383

More information

Details

On most platforms, Go uses the given system root certificates. However, in some narrower cases, the system trust stores may not be updated without further action.

To defend against the narrower set of cases that may remain affected, a denylist was added in crypto/x509 to return an error when calling Verify with any of the known intermediate certificates that are no longer considered to be trustworthy.

Severity

Unknown

References

• https://go.dev/cl/851047
• https://go.dev/issue/82345
• https://groups.google.com/g/golang-announce/c/66pojueaQek

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

---

Release Notes

golang/go (go)

v1.27.3

Compare Source

golangci/golangci-lint (golangci-lint)

v2.15.0

Compare Source

Released on 2026-10-16

1. Linters new features or changes
   • errcheck: from 1.20.0 to 1.30.0
   • exhaustive: from 0.13.0 to 0.15.0 (⚠️ changes)
   • gocognit: from 1.2.1 to 1.3.0
   • golines: from 0.15.0 to 0.16.0
   • govet-modernize: from 0.50.0 to 0.52.0
   • loggercheck: from 0.12.0 to 0.13.0
   • predeclared: from 0.2.2 to 0.3.0
   • wrapcheck: from 2.12.0 to 2.13.0
2. Linters bug fixes
   • bidichk: from 0.3.3 to 0.3.4
   • canonicalheader: from a25c71c to e18e5c5
   • gofumpt: improve deprecation logs
   • gosec: improve concurrency default value
   • iface: from 1.5.1 to 1.5.3
   • paralleltest: from 1.0.15 to 1.0.16
   • revive: from 1.17.0 to 1.17.1
   • revive: the rules context-keys-type, errorf, modifies-value-receiver, range-val-address, string-of-int, time-equal, time-naming, unexported-return, unhandled-error, var-declaration are working (less randomly).
   • rowserrcheck: from c5f79b8 to e0740d5
   • staticcheck: from 0.8.1 to 0.8.2
3. Bug fixes
   • fix: compute custom version hash with module versions
   • fix: env vars loading (related to revive)

⚠️ Changes of the exhaustive linter:

• The replaced options still exists, and partially works, but they are deprecated.
• The options explicit-exhaustive-switch and explicit-exhaustive-map have been replaced by explicit-exhaustive.
• The check the value map has been replaced by mapliteral.
• The option ignore-enum-members (string) has been replaced by ignore-constants (slice).
• The option ignore-enum-types (string) has been replaced by ignore-types (slice).
• New report messages.
• The linter is a now a "slow" linter.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 12:59 AM, on day 1 and 15 of the month (* 0 1,15 * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.64%. Comparing base (706ebcb) to head (56008d7).

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #647   +/-   ##
=======================================
  Coverage   82.64%   82.64%           
=======================================
  Files          19       19           
  Lines        2616     2616           
=======================================
  Hits         2162     2162           
  Misses        454      454           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.