Skip to content

Prepare v3.14.1 with SDK and JWX fixes - #9

Merged
Vonng merged 1 commit into
mainfrom
codex/release-silo-pkg-v3.14.1
Sep 16, 2026
Merged

Vonng merged 1 commit into
mainfrom
codex/release-silo-pkg-v3.14.1

Conversation

@Vonng

@Vonng Vonng commented Sep 16, 2026

Copy link
Copy Markdown
Member

Prepare silo-pkg v3.14.1 with upstream minio-go 32e1f32cb176, which reports CopyObject errors embedded in HTTP 200 responses, and JWX v3.3.0, which escapes custom JSON field names. The JWX test dependency selects testify v1.12.1.

Migrate the existing linter entry to gomodguard_v2 and update release / dependency notes. Preserve the Go 1.26 floor, Go 1.27.1 toolchain, go-systemd v22.6.0 compatibility replacement, public Go signatures and v3.14.0 password-policy semantics.

Local validation:

  • GOWORK=off make test on Go 1.27.1: lint and the complete race suite passed. An independent temporary directory avoided another task's linter lock.
  • GOWORK=off GOTOOLCHAIN=local go test -race -tags kqueue ./... with Go 1.26.8: passed.
  • go mod tidy -diff, go mod verify and git diff --check: passed.
  • govulncheck v1.8.0: no reachable or imported-package vulnerabilities. GO-2026-5932 remains a module-only advisory in unused OpenPGP code.
  • The selected upstream SDK's Test200CopyObjectWithError and JWX's JWT / JWS / JWE / JWK field-name injection regressions passed with the race detector in isolated copies of the exact dependency sources.

The repository CI also runs the LDAP configuration tests against its OpenLDAP service. Tagging and publishing v3.14.1 will follow successful CI on the merged main commit.

Signed-off-by: Feng Ruohang <rh@vonng.com>
@Vonng
Vonng merged commit fa657ef into main Sep 16, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant