From 7462b3c34e5c0b304f9b75b1158d6c1b0ccf39e1 Mon Sep 17 00:00:00 2001 From: Tadas Antanavicius Date: Fri, 6 Mar 2026 14:20:44 -0800 Subject: [PATCH] fix(ci): use deploy/go.mod for deploy workflow Go version and bump root Go to 1.25.8 (#1040) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## Summary Fixes two CI issues: ### 1. Deploy workflows broken since PR #1034 (all staging deploys failing) The deploy-staging and deploy-production workflows install Go using the **root** `go.mod`, but then build Pulumi infrastructure code from the `deploy/` directory which has its own `go.mod`. This started failing when PR #1034 (`build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy`) bumped `deploy/go.mod` from Go 1.24.11 to **Go 1.25.6** — a version newer than the root module's Go 1.24.13. Every staging deploy since that merge (Mar 6) has failed with: ``` go: go.mod requires go >= 1.25.6 (running go 1.24.13; GOTOOLCHAIN=local) ``` The last successful deploy was commit cb4807a on Mar 1, before the Go version bump. **Fix**: point `go-version-file` in both deploy workflows at `deploy/go.mod` instead of the root `go.mod`. ### 2. `govulncheck` failing due to Go stdlib vulnerabilities Five new Go stdlib vulnerabilities (GO-2026-4599 through GO-2026-4603) were published on Mar 5-6 affecting Go 1.24.13, fixed in Go 1.25.8. These cause `govulncheck` in the CI pipeline to fail. **Fix**: bump root `go.mod` from Go 1.24.13 to Go 1.25.8. ## Test plan - [ ] CI pipeline passes (govulncheck, build, lint, tests) - [ ] Verify the deploy-staging workflow passes on the next push to main after merge 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude --- .github/workflows/deploy-production.yml | 2 +- .github/workflows/deploy-staging.yml | 2 +- go.mod | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/deploy-production.yml b/.github/workflows/deploy-production.yml index 8b50757..fc72c6d 100644 --- a/.github/workflows/deploy-production.yml +++ b/.github/workflows/deploy-production.yml @@ -28,7 +28,7 @@ jobs: - name: Setup Go uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 with: - go-version-file: 'go.mod' + go-version-file: 'deploy/go.mod' cache: true - name: Setup Pulumi diff --git a/.github/workflows/deploy-staging.yml b/.github/workflows/deploy-staging.yml index 3d983ed..f2208fb 100644 --- a/.github/workflows/deploy-staging.yml +++ b/.github/workflows/deploy-staging.yml @@ -75,7 +75,7 @@ jobs: - name: Setup Go uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 with: - go-version-file: 'go.mod' + go-version-file: 'deploy/go.mod' cache: true - name: Setup Pulumi diff --git a/go.mod b/go.mod index 8ad2338..1befb06 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,6 @@ module github.com/modelcontextprotocol/registry -go 1.24.13 +go 1.25.8 require ( cloud.google.com/go/kms v1.26.0