[onedr0p]

Overview

Go Vulncheck fails on main:

• standard library vulnerabilities in Go 1.27.1 (for example GO-2026-6613 in net/http), fixed in Go 1.27.2

This bumps the mise Go toolchain from 1.27.1 to 1.27.2. CI, the release workflows and the Dockerfile all take the Go version from .mise/config.toml.

Additional information

• The go directive in go.mod is unchanged.
• Verified locally: go build ./... and mise run vulncheck pass with Go 1.27.2.

Requirements

• I have read and agree with the contributing guidelines
• AI usage disclosure: YES - Claude Opus 5.5 (xhigh effort) made the change, ran the build and vulncheck locally and drafted this description.

[greptile-apps]

Confidence Score: 5/5

[High impact] The PR appears safe to merge; no actionable issues were found.

Summary

Updates the pinned Go toolchain from 1.27.1 to 1.27.2.

• Developer and build tools now use Go 1.27.2.
• The asset task lists its inputs and outputs in a new order.

Acknowledgment: onedr0p explicitly states that the go directive in go.mod remains unchanged.

_{Reviews (1) · Last reviewed commit: "chore(mise): bump Go to 1.27.2" · Reviewed by Greptile}