From 698a65cccfae5471bca3d036898aaf0ef5e7d354 Mon Sep 17 00:00:00 2001
From: tannevaled <tannevaled@users.noreply.github.com>
Date: Sun, 11 Oct 2026 01:41:04 +0200
Subject: [PATCH] ci: move the Go pin from 1.27.1 to 1.27.2

3 occurrence(s) in ci.yml.

Pinning was right: an alias has no version to review. But a pinned
fleet cannot move, and a Go patch release is usually a SECURITY
release -- the standard library is compiled into every binary, so the
toolchain that built it is the toolchain it carries.

An EXACT move: -from 1.27.1 names the version to change, so a job held
back on purpose at some other version is not a candidate and is left
as it is.

go.mod is not raised: the directive is a minimum for consumers, and
the workflow pin is what builds the artefacts.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 7cdc99c..62d3d18 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
 
       - uses: actions/setup-go@v7
         with:
-          go-version: "1.27.1"
+          go-version: '1.27.2'
           check-latest: true
           cache: true
 
@@ -94,7 +94,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: "1.27.1"
+          go-version: '1.27.2'
       - run: sudo apt-get update && sudo apt-get install -y qemu-user-static
       - name: Test under qemu (${{ matrix.goarch }})
         run: GOARCH=${{ matrix.goarch }} go test ${{ matrix.exec }} ./...
@@ -116,5 +116,5 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: "1.27.1"
+          go-version: '1.27.2'
       - run: go test ./...