From 37b99d73b3a8042213e9e668a2709567c1ee771f Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Fri, 16 Oct 2026 18:53:33 +0200 Subject: [PATCH] =?UTF-8?q?Go=201.27.2=20and=20x/crypto=20v0.58.0=20(R-972?= =?UTF-8?q?)=20=E2=80=94=20built=20and=20tested,=20not=20released?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS --- CHANGELOG.md | 7 +++++++ REPORT.md | 16 +++++++--------- go.mod | 9 +++++---- go.sum | 12 ++++++------ 4 files changed, 25 insertions(+), 19 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 1843a18..622d956 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,3 +1,10 @@ +## unreleased — Go 1.27.2 and golang.org/x/crypto v0.58.0 (R-972, 2026-10-16) + +**Not released, not deployed** — agent releases wait for the operator's vouch; the next vouched release carries this. +`go.mod`: `go 1.27.2` (was 1.25.0; the shipped 0.158.1 binary was built with go1.26.0), x/crypto v0.58.0 (was v0.52.0), +x/sys v0.49.0. `go build`, `go vet`, the full `go test ./...` and `agent_gates.py --fast` green on Go 1.27.2. +`release-agent.sh` builds with the toolchain `go.mod` names (GOTOOLCHAIN=auto), so no script change. + ## scripts only — `release-agent.sh` refuses when the registry cannot say the version is new (R-1098, 2026-10-16) No agent release; no binary changes. `scripts/release-agent.sh` already refused a version whose tag exists or whose diff --git a/REPORT.md b/REPORT.md index b2cac27..ead0342 100644 --- a/REPORT.md +++ b/REPORT.md @@ -1,14 +1,12 @@ -# REPORT — release-agent.sh: only a clean 404 proves a version is new (R-1098, 2026-10-16) +# REPORT — the agent on Go 1.27.2 (R-972, 2026-10-16) — NOT released -Written in ASD-STE100 Simplified Technical English. Part of the apps burndown (felhom.eu -`REPORT-burndown-apps-2026-10-16.md`). No agent release, no binary change. +Written in ASD-STE100 Simplified Technical English. Part of burndown 2 (felhom.eu `REPORT-burndown2-2026-10-16.md`). -- **What was wrong:** `scripts/release-agent.sh` refused a version whose tag exists or whose package answers 200. A - registry it could not reach (`000`) or a server error (`500`) passed as „new". -- **What changed:** only `404` proves the version is new; anything else refuses and names the code. -- **Test:** `scripts/test_release_push_once.sh` — 5 cases, all right; with the new line removed, 2 fail (unreachable, - server error). `agent_gates.py --fast` OK. +- **What changed:** `go.mod` `go 1.27.2` and golang.org/x/crypto v0.58.0. No code change. +- **Proof:** `go build ./...`, `go vet ./...`, `go test ./...` rc 0 on Go 1.27.2; `agent_gates.py --fast` all OK. +- **Not done, on purpose:** no release and no deploy — agent releases wait for the operator's vouch. R-972 stays + NARROWED for the agent: the next vouched release carries the new Go. ## Observations -1. The release test is not run by `agent_gates.py` (the same as felhom.eu's hub build tests): it is run by hand. NOT-A-FINDING: the script changes rarely, and its header names the test to run with a change; the controller's and the hub's build tests are run the same way. +1. The release script needs no change: it builds with the toolchain `go.mod` names. NOT-A-FINDING: GOTOOLCHAIN=auto on DooPlex fetched go1.27.2 for this build and will for a release build. diff --git a/go.mod b/go.mod index 976577c..4fe28e4 100644 --- a/go.mod +++ b/go.mod @@ -1,7 +1,8 @@ module gitea.dooplex.hu/admin/felhom-agent -go 1.25.0 +go 1.27.2 -require golang.org/x/crypto v0.52.0 - -require golang.org/x/sys v0.45.0 // indirect +require ( + golang.org/x/crypto v0.58.0 + golang.org/x/sys v0.49.0 +) diff --git a/go.sum b/go.sum index 3f17939..dca889c 100644 --- a/go.sum +++ b/go.sum @@ -1,6 +1,6 @@ -golang.org/x/crypto v0.52.0 h1:RMs7fP2rXdep0CftQlK8Uf+kibLm7qkCcradZWYz988= -golang.org/x/crypto v0.52.0/go.mod h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc= -golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY= -golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= -golang.org/x/term v0.43.0 h1:S4RLU2sB31O/NCl+zFN9Aru9A/Cq2aqKpTZJ6B+DwT4= -golang.org/x/term v0.43.0/go.mod h1:lrhlHNdQJHO+1qVYiHfFKVuVioJIheAc3fBSMFYEIsk= +golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54= +golang.org/x/crypto v0.58.0/go.mod h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w= +golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA= +golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og= +golang.org/x/term v0.47.0 h1:cpyOwQkr2Nzxe2p6KnrTG7Ei2wtzjsuSjhpXXepZ/BM= +golang.org/x/term v0.47.0/go.mod h1:efAfAuG6RKABvg1ArGebRkvX6LXul14SM67o2e4mUCY=