From d69965a3fe868ec99218adce1b448b1331da0928 Mon Sep 17 00:00:00 2001 From: tiennm99 Date: Fri, 14 Aug 2026 14:13:24 +0700 Subject: [PATCH] fix(ci): take the Go version from go.mod MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit setup-go v7 exports GOTOOLCHAIN=local, so Go no longer downloads the toolchain a module asks for — whatever setup-go installed has to satisfy it. `go-version: '1.26'` resolves to the runner manifest's patch, which is 1.26.5, against modules requiring 1.26.6 since this morning's CVE bump. The parser tests stopped on that. go-version-file installs exactly what the modules declare, and removes the fourth place a Go version was written down. --- .github/workflows/deploy-pages.yml | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/.github/workflows/deploy-pages.yml b/.github/workflows/deploy-pages.yml index 4a9b153..56ed29b 100644 --- a/.github/workflows/deploy-pages.yml +++ b/.github/workflows/deploy-pages.yml @@ -28,9 +28,15 @@ jobs: steps: - uses: actions/checkout@v7 + # The version comes from go.mod rather than a literal here. setup-go sets + # GOTOOLCHAIN=local, so Go will not fetch the toolchain a module asks for + # — the one installed has to satisfy it. A literal '1.26' resolves to + # whatever patch the runner manifest has, which was 1.26.5 against a + # go.mod requiring 1.26.6, and the build stopped there. All three modules + # are bumped together, so parser/go.mod speaks for them. - uses: actions/setup-go@v7 with: - go-version: '1.26' + go-version-file: parser/go.mod cache-dependency-path: | parser/go.sum crawler/go.sum