commit e3336a22ad3f0a90bd252c95d8b5544e02674205 [browse]
Author: Gopher Robot
Date: 2026-08-19 07:36:34 -07:00

[release-branch.go1.26] go1.26.7

Change-Id: Ia3e132d4c983f77f720a01d12ff0222a39d03c18
Reviewed-on: https://go-review.googlesource.com/c/go/+/817760
TryBot-Bypass: Gopher Robot <gobot@golang.org>
Reviewed-by: Carlos Amedee <carlos@golang.org>
Auto-Submit: Gopher Robot <gobot@golang.org>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>

commit 50e5b59e9cf45a563ebea3adeb2c2d7fae340069 [browse]
Author: Damien Neil
Date: 2026-08-17 11:11:52 -07:00

[release-branch.go1.26] net/http: clear ReadHeaderTimeout after accepting an unencrypted h2 conn

Fix a bug where a new unencrypted HTTP/2 connection would leave
ReadHeaderTimeout set on the underlying net.Conn, causing the connection
to close abruptly when the timeout expired.

Consistently clear the net.Conn's timeouts before passing a Conn off
to the http2 package.

The new test is adapted from CL 815300 by Benno Moskovitz.

For #80876
Fixes #80927

Change-Id: I42ae5bd678a1cd44879ecc28895b90896a6a6964
Reviewed-on: https://go-review.googlesource.com/c/go/+/816600
Reviewed-by: Nicholas Husin <husin@google.com>
Auto-Submit: Damien Neil <dneil@google.com>
Reviewed-by: Nicholas Husin <nsh@golang.org>
LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-on: https://go-review.googlesource.com/c/go/+/817180

commit 98e6631a5aa274aadc7f5d8c390057fca50368fb [browse]
Author: Dmitri Shuralyov
Date: 2026-08-13 18:20:16 -04:00

[release-branch.go1.26] cmd/internal/moddeps: restore tests

By now PRIVATE-track security fixes involving a vendored package
have been released, and these tests can be made to run again.

For #80765.
For #80767.

[git-generate]
updatestd -goroot=$(pwd) -branch=internal-branch.go1.26-vendor
sed -i '' '/t.Skip()/d' src/cmd/internal/moddeps/moddeps_test.go

Change-Id: I922f952b362e6de1146f5891edf648bcc1e2b76f
Reviewed-on: https://go-review.googlesource.com/c/go/+/815260
Auto-Submit: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-by: Neal Patel <nealpatel@google.com>
LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>

commit 1ea5a71ad8ceb7b9f16b4b6f8ea4739a4327dd6e [browse]
Author: Gopher Robot
Date: 2026-08-13 10:14:20 -07:00

[release-branch.go1.26] go1.26.6

Change-Id: I04258bea694def9a16dd544fba28fea45eeadbbb
Reviewed-on: https://go-review.googlesource.com/c/go/+/814840
TryBot-Bypass: Gopher Robot <gobot@golang.org>
Reviewed-by: Mark Freeman <mark@golang.org>
Auto-Submit: Gopher Robot <gobot@golang.org>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>

commit 115eb476aaca4531374c42e19e6f199265c2e25e [browse]
Author: Neal Patel
Date: 2026-08-07 00:23:22 Z

[release-branch.go1.26] cmd/vendor: fix CVE-2026-56865 in x/mod

Fixes #80744
Fixes CVE-2026-56865

Change-Id: I1e063053041c2d88b7801bfe09b6060f4def6afe
Reviewed-on: https://go-internal-review.googlesource.com/c/go/+/5140
Reviewed-by: Damien Neil <dneil@google.com>
Reviewed-by: Nicholas Husin <husin@google.com>
Reviewed-on: https://go-internal-review.googlesource.com/c/go/+/5200
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
Reviewed-on: https://go-review.googlesource.com/c/go/+/814802
Reviewed-by: Mark Freeman <mark@golang.org>
Auto-Submit: Gopher Robot <gobot@golang.org>
TryBot-Bypass: Gopher Robot <gobot@golang.org>