all: upd go (18)

Author: masterkusok

.github/workflows/build.yaml

@@ -1,6 +1,6 @@
 'env':
   'BASE_IMAGE': |-
-    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.6--1' }}
+    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.7--1' }}
   'BUILD_DIR': |-
     build
   'CLIENT_DIR': |-

.github/workflows/private.yaml

@@ -1,6 +1,6 @@
 'env':
   'BASE_IMAGE': |-
-    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.6--1' }}
+    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.7--1' }}
   'CACHE_BUSTER': |-
     ${{ inputs.cache_buster || '0' }}
   'CLIENT_DIR': |-

.github/workflows/workflow.yaml

@@ -1,6 +1,6 @@
 'env':
   'CLIENT_DIR': 'client'
-  'GO_VERSION': '1.26.6'
+  'GO_VERSION': '1.26.7'
   'NODE_VERSION': '24'
 'jobs':
   'ESLint':

CHANGELOG.md

@@ -22,6 +22,12 @@ NOTE: Add new changes BELOW THIS COMMENT.
 NOTE: Add new changes ABOVE THIS COMMENT.
 -->
 
+### Security
+
+- Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.7][go-1.26.7].
+
+[go-1.26.7]: https://groups.google.com/g/golang-announce/c/qA6Vpj2UA-4
+
 ## [v0.107.79] - 2026-08-18
 
 See also the [v0.107.79 GitHub milestone][ms-v0.107.79].

Makefile

@@ -25,7 +25,7 @@ DIST_DIR = dist
 GOAMD64 = v1
 GOPROXY = https://proxy.golang.org|direct
 GOTELEMETRY = off
-GOTOOLCHAIN = go1.26.6
+GOTOOLCHAIN = go1.26.7
 GPG_KEY = devteam@adguard.com
 GPG_KEY_PASSPHRASE = not-a-real-password
 NPM = npm

bamboo-specs/release.yaml

@@ -12,7 +12,7 @@
     'channel': 'edge'
     'clientDir': 'client_v2'
     'dockerFrontend': 'adguard/home-js-builder:4.0'
-    'dockerGo': 'adguard/go-builder:1.26.6--1'
+    'dockerGo': 'adguard/go-builder:1.26.7--1'
 
 'stages':
   - 'Build frontend':
@@ -297,7 +297,7 @@
             'channel': 'beta'
             'clientDir': 'client'
             'dockerFrontend': 'adguard/home-js-builder:4.0'
-            'dockerGo': 'adguard/go-builder:1.26.6--1'
+            'dockerGo': 'adguard/go-builder:1.26.7--1'
     # release-vX.Y.Z branches are the branches from which the actual final
     # release is built.
   - '^release-v[0-9]+\.[0-9]+\.[0-9]+':
@@ -314,4 +314,4 @@
             'channel': 'release'
             'clientDir': 'client'
             'dockerFrontend': 'adguard/home-js-builder:4.0'
-            'dockerGo': 'adguard/go-builder:1.26.6--1'
+            'dockerGo': 'adguard/go-builder:1.26.7--1'

docker/ci.Dockerfile

@@ -28,7 +28,7 @@
 #    needed.  Keep it in sync with bamboo-specs/bamboo.yaml.
 
 # NOTE:  Keep in sync with bamboo-specs/bamboo.yaml.
-ARG BASE_IMAGE=adguard/go-builder:1.26.6--1
+ARG BASE_IMAGE=adguard/go-builder:1.26.7--1
 
 # The dependencies stage is needed to install packages and tool dependencies.
 # This is also where binaries like osslsigncode, which may be required for tests

go.mod

@@ -1,6 +1,6 @@
 module github.com/AdguardTeam/AdGuardHome
 
-go 1.26.6
+go 1.26.7
 
 require (
 	github.com/AdguardTeam/dnscrypt v0.0.2