build(deps): update go to 1.24.9
Metadata
Current evaluation
Merged PR canonical/fetch-service#500 (commit c67f817) by upils bumped go.mod from go 1.24.6 to 1.24.9, a 1-line change fixing several Go security vulnerabilities. Approved by 2 reviewers with all CI green; later superseded by #613 to Go 1.25.x.
Resolution: closed resolved
Reason: The PR was approved by two reviewers and merged into main as commit c67f817, which sets the go.mod directive to 1.24.9 to resolve security vulnerabilities; all CI checks (scanners, snap-test, unit-tests, linters) passed.
Evaluated by: mr-cal-bot
No scores available.
Issue body
- [x] Have you signed the [CLA](http://www.ubuntu.com/legal/contributors/)?
-----
Resolves several security vulnerability issues.
Evaluation history
| Date | Model | Scores | Action | Summary |
|---|---|---|---|---|
| stealth/space-bunny-alpha | — | closed resolved | Merged PR canonical/fetch-service#500 (commit c67f817) by upils bumped go.mod from go 1.24.6 to 1.24.9, a 1-line change fixing several Go security vulnerabilities. Approved by 2 reviewers with all CI green; later superseded by #613 to Go 1.25.x. | |
| stealth/space-bunny-alpha | — | closed resolved | Merged Go 1.24.9 update in canonical/fetch-service#500, addressing several security vulnerabilities. Approved by two reviewers, with all CI checks passing. | |
| qwen/qwen3.6-35b-a3b | — | — | Merged update to Go 1.24.9 to resolve security vulnerabilities. Approved by two reviewers with all CI checks passing. The change updates a single file with one line addition and one deletion. |
Update history
| Date | Change |
|---|---|
| created |
Related work
-
Superseded By:
canonical/fetch-service#613
(confidence 80%)
Commit 326e971 'build: update go version to 1.25.10' later superseded this bump; go.mod now declares go 1.25.11.
Related issues
| Issue | Project | State | Summary | Similarity |
|---|---|---|---|---|
| #441 build(deps): update go to 1.24.6 | fetch-service | merged | Merged PR #441 in commit de79cbe, upgrading Go to 1.24.6 to resolve an OSV complaint; all CI checks passed. | |
| #346 build: update minimum go version to 1.22.12 | fetch-service | merged | Merged PR #346 via commit d45ceaf, raising fetch-service's minimum Go version to 1.22.12 to include the listed GO security fixes. | |
| #613 build: update go version to 1.25.10 | fetch-service | merged | Merged PR #613 as commit 326e971, updating two files from Go 1.25.9 to Go 1.25.10 after approval by two reviewers. | |
| #426 chore: go.mod to go 1.24 | fetch-service | merged | Maintainer PR canonical/fetch-service#426 bumped go.mod to Go 1.24; merged (commit 84b80a7, +1/-5). Later superseded by #441, #500 and #613 raising the toolchain to 1.25.x (go.mod now at go 1.25.11). | |
| #348 build(deps): update go-crypto to v1.1.5 | fetch-service | merged | Merged PR #348 (commit 53e26a0) bumped github.com/ProtonMail/go-crypto to v1.1.5; shipped in fetch-service 0.7.0 (2025-04-08) as "fix(deps): update go-crypto to v1.1.5". |