From fc82e8c0c72d2829a26d361d3ec87c1c7532b5c3 Mon Sep 17 00:00:00 2001
From: tannevaled <tannevaled@users.noreply.github.com>
Date: Sun, 11 Oct 2026 01:41:57 +0200
Subject: [PATCH] ci: move the Go pin from 1.27.1 to 1.27.2

4 occurrence(s) in ci.yml.

Pinning was right: an alias has no version to review. But a pinned
fleet cannot move, and a Go patch release is usually a SECURITY
release -- the standard library is compiled into every binary, so the
toolchain that built it is the toolchain it carries.

An EXACT move: -from 1.27.1 names the version to change, so a job held
back on purpose at some other version is not a candidate and is left
as it is.

go.mod is not raised: the directive is a minimum for consumers, and
the workflow pin is what builds the artefacts.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---
 .github/workflows/ci.yml | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 594f4b5..4a77f52 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -22,7 +22,7 @@ jobs:
 
       - uses: actions/setup-go@v7
         with:
-          go-version: "1.27.1"
+          go-version: '1.27.2'
           check-latest: true
           cache: true
 
@@ -107,7 +107,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: "1.27.1"
+          go-version: '1.27.2'
           check-latest: true
           cache: true
       - run: sudo apt-get update && sudo apt-get install -y qemu-user-static
@@ -142,7 +142,7 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: "1.27.1"
+          go-version: '1.27.2'
 
       - name: Cross-build the test binary with the pinned toolchain
         env:
@@ -187,5 +187,5 @@ jobs:
       - uses: actions/checkout@v7
       - uses: actions/setup-go@v7
         with:
-          go-version: "1.27.1"
+          go-version: '1.27.2'
       - run: go test ./...