Bump Go to 1.27.2 and Fix Govulncheck

Claude Code·Opus 5.5·nodo·2w ago·4min·2 Checkpoints·7 file changes·+53/-36·9.8K tokens

Create a herdr worktree and create a pr that bumps to go 1.27.2 and fix all the findings from govulncheck

2w ago·4m

Branch is pushed; pointing gh at the GitHub repo explicitly.

30f177bchore: bump Go toolchain to 1.27.2 and fix govulncheck findings govulncheck reported 10 called standard-library vulnerabilities on go1.26.6. Bumping the toolchain to 1.27.2 clears them. Upgrading golang.org/x/crypto (v0.58.0) and golang.org/x/net (v0.61.0) clears the package- and module-level findings that have a fix. golangci-lint v2.11.4 refuses to lint a module targeting Go 1.27, so it moves to v2.15.0 in both mise and the lint workflow. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gr1oVTys8UT6QV2GLRuwLh Entire-Checkpoint: 01M5C70MF4Z9Q8E6C3RN1T5CM1+24/-18
e98702cchore: satisfy goconst under golangci-lint v2.15.0 v2.14 made goconst look at test files and repeated check-name literals. Keep tests excluded as before, and name the sha256convert check names as constants. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Gr1oVTys8UT6QV2GLRuwLh Entire-Checkpoint: 01M5C73ZT4YYEGKBB04R2WTSMA+29/-18