From bcb24ceaf181a0f52fe54d4b510abffed741ed38 Mon Sep 17 00:00:00 2001
From: O M <om@omLaptop.local>
Date: Mon, 26 Oct 2026 20:41:15 -0400
Subject: [PATCH] Update Go to 1.27.3 so govulncheck no longer fails.

Go 1.27.2 still accepts intermediate certificates that crypto/x509 distrusts starting in 1.27.3.

Co-authored-by: Cursor <cursoragent@cursor.com>
---
 .github/workflows/ci.yml      | 4 ++--
 .github/workflows/codeql.yml  | 2 +-
 .github/workflows/release.yml | 2 +-
 Dockerfile                    | 2 +-
 go.mod                        | 2 +-
 5 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d5e4fe8..55e1fc2 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -57,7 +57,7 @@ jobs:
 
       - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.2"
+          go-version: "1.27.3"
           cache-dependency-path: go.sum
 
       - name: Download modules
@@ -77,7 +77,7 @@ jobs:
       - id: govulncheck
         uses: golang/govulncheck-action@032d45514ae346b1db93c04b0c90b841c370344f # v1.1.0
         with:
-          go-version-input: "1.27.2"
+          go-version-input: "1.27.3"
           check-latest: false
           go-package: ./...
           cache-dependency-path: go.sum
diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml
index 5a5dfdb..36db60a 100644
--- a/.github/workflows/codeql.yml
+++ b/.github/workflows/codeql.yml
@@ -38,7 +38,7 @@ jobs:
         if: matrix.language == 'go'
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.2"
+          go-version: "1.27.3"
           cache-dependency-path: go.sum
 
       - name: Initialize CodeQL
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 572373f..42ccc79 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -28,7 +28,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0
         with:
-          go-version: "1.27.2"
+          go-version: "1.27.3"
           cache-dependency-path: go.sum
 
       - name: Install Cosign
diff --git a/Dockerfile b/Dockerfile
index bc016d7..0b08cb6 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,7 +1,7 @@
 # Copyright 2026 OpenSourceOM
 # SPDX-License-Identifier: Apache-2.0
 
-FROM golang:1.27.2-alpine@sha256:f92b6ef800e499660581efdabdf25d9d817a9d124eaf900924f0504e7e27e12d AS builder
+FROM golang:1.27.3-alpine@sha256:b8c9b82affbbb82a020bbcf998dad2ba9516944ac7e883524642a481a9505e9c AS builder
 WORKDIR /src
 COPY go.mod go.sum ./
 RUN go mod download
diff --git a/go.mod b/go.mod
index e9fd2a4..a20a9d3 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/OpenSourceOM/core
 
-go 1.27.2
+go 1.27.3
 
 require (
 	cloud.google.com/go/compute/metadata v0.10.0