Skip to content

Update production Go toolchain to 1.26.6 #13

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
mellowcroc merged 2 commits into from
Aug 20, 2026
Merged

Update production Go toolchain to 1.26.6 #13

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
1628572
chore: update production Go toolchain to 1.26.6
mellowcroc Aug 20, 2026
09fd8f0
fix: pin Go 1.26.6 toolchain hashes
mellowcroc Aug 20, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,7 @@ jobs:

- name: Verify toolchain
run: |
test "$(go env GOVERSION)" = go1.26.5
test "$(go env GOVERSION)" = go1.26.6
test "$(go env GOHOSTOS)" = linux
test "$(go env GOHOSTARCH)" = amd64

Expand Down
2 changes: 1 addition & 1 deletion README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -259,6 +259,6 @@ bucket agrees with itself.
Operators need the AWS CLI and the authenticated coordinated ceremony kit.
Source-free installation is documented in
[docs/INSTALL.md](docs/INSTALL.md). Release maintainers and independent build
auditors need Go 1.26.5 and use [docs/RELEASE.md](docs/RELEASE.md). Relay has no
auditors need Go 1.26.6 and use [docs/RELEASE.md](docs/RELEASE.md). Relay has no
third-party Go dependencies; its production builder emits a signed,
reproducible release package.
4 changes: 2 additions & 2 deletions docs/RELEASE.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,15 +7,15 @@ signing key.

## Trust inputs and prerequisites

Production Relay and `mpc-ceremony` releases target Linux/amd64 with Go 1.26.5.
Production Relay and `mpc-ceremony` releases target Linux/amd64 with Go 1.26.6.
Install Go using the [official Go installation guide](https://go.dev/doc/install)
and confirm:

go version

Expected:

go version go1.26.5 linux/amd64
go version go1.26.6 linux/amd64

The build host also needs Git, GnuPG, `grep`, `sed`, GNU coreutils, and GNU
findutils. Do not allow `GOTOOLCHAIN` to silently select another production
Expand Down
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
module github.com/zksecurity/relay

go 1.26.5
go 1.26.6
12 changes: 6 additions & 6 deletions scripts/build-relay-release.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -173,8 +173,8 @@ fi
GO_VERSION=$(env -u GOROOT \
CGO_ENABLED=0 GOARCH=amd64 GOENV=off GOEXPERIMENT= GOFIPS140=off \
GOOS=linux GOAMD64=v1 GOTOOLCHAIN=local "$GO_BIN" env GOVERSION)
if [[ "$GO_VERSION" != "go1.26.5" ]]; then
echo "FAIL: release build requires go1.26.5, found $GO_VERSION" >&2
if [[ "$GO_VERSION" != "go1.26.6" ]]; then
echo "FAIL: release build requires go1.26.6, found $GO_VERSION" >&2
exit 1
fi
GO_HOST_OS=$(env -u GOROOT GOENV=off GOTOOLCHAIN=local "$GO_BIN" env GOHOSTOS)
Expand All @@ -188,10 +188,10 @@ if [[ -n "$(env -u GOROOT GOENV=off GOTOOLCHAIN=local "$GO_BIN" env GOEXPERIMENT
exit 1
fi

EXPECTED_GO_SHA256=8da5fd321795754b994c64e3eb8a5a14ff47bd285559a7e876f3c79abafc67f9
EXPECTED_COMPILE_SHA256=10c67b9de41c1e546b9bf416ceef410e5e3dd87a76d129b08b74a9570db9c463
EXPECTED_LINK_SHA256=e58a36e6550a32ed7175cd6e2a1824dc66c034d1e3539ebeac8af719a9150d5d
EXPECTED_ASM_SHA256=0c9a07447aba3ed1df7a0a3e85f6e003d9bf312d2936dfc4b79e3d81e8ca7636
EXPECTED_GO_SHA256=29e6e0b8be61beb1489ceae62b304343566de8a1dc700af74bde7aeb9c80ad45
EXPECTED_COMPILE_SHA256=73da54c06c0702ae7c8cff309dd3958980af7ae0307cf319d7d0cb2bbd3fafd2
EXPECTED_LINK_SHA256=048670775edfd89c6551149c197816dacdcc12c518b29ff1c533751b2dc4b976
EXPECTED_ASM_SHA256=769ac2d73d09b7cc5479acdeb9f168c1772743420ffca2d9e990a9b0348d2836
GO_TOOL_DIR=$(env -u GOROOT GOENV=off GOTOOLCHAIN=local "$GO_BIN" env GOTOOLDIR)
verify_tool_hash() {
local path=$1
Expand Down
2 changes: 1 addition & 1 deletion scripts/relay-release-tool/main.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@ import (
const (
manifestSchema = "relay-build-package/v1"
expectedModulePath = "github.com/zksecurity/relay"
productionGoVersion = "go1.26.5"
productionGoVersion = "go1.26.6"
buildFlags = "-trimpath -buildvcs=true -ldflags=-buildid="
)

Expand Down
12 changes: 6 additions & 6 deletions scripts/verify-relay-release.sh
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -156,15 +156,15 @@ fi
GO_VERSION=$(env -u GOROOT GOENV=off GOTOOLCHAIN=local "$GO_BIN" env GOVERSION)
GO_HOST_OS=$(env -u GOROOT GOENV=off GOTOOLCHAIN=local "$GO_BIN" env GOHOSTOS)
GO_HOST_ARCH=$(env -u GOROOT GOENV=off GOTOOLCHAIN=local "$GO_BIN" env GOHOSTARCH)
if [[ "$GO_VERSION" != "go1.26.5" || "$GO_HOST_OS" != "linux" || "$GO_HOST_ARCH" != "amd64" ]]; then
echo "FAIL: verification requires Go 1.26.5 on linux/amd64" >&2
if [[ "$GO_VERSION" != "go1.26.6" || "$GO_HOST_OS" != "linux" || "$GO_HOST_ARCH" != "amd64" ]]; then
echo "FAIL: verification requires Go 1.26.6 on linux/amd64" >&2
exit 1
fi

EXPECTED_GO_SHA256=8da5fd321795754b994c64e3eb8a5a14ff47bd285559a7e876f3c79abafc67f9
EXPECTED_COMPILE_SHA256=10c67b9de41c1e546b9bf416ceef410e5e3dd87a76d129b08b74a9570db9c463
EXPECTED_LINK_SHA256=e58a36e6550a32ed7175cd6e2a1824dc66c034d1e3539ebeac8af719a9150d5d
EXPECTED_ASM_SHA256=0c9a07447aba3ed1df7a0a3e85f6e003d9bf312d2936dfc4b79e3d81e8ca7636
EXPECTED_GO_SHA256=29e6e0b8be61beb1489ceae62b304343566de8a1dc700af74bde7aeb9c80ad45
EXPECTED_COMPILE_SHA256=73da54c06c0702ae7c8cff309dd3958980af7ae0307cf319d7d0cb2bbd3fafd2
EXPECTED_LINK_SHA256=048670775edfd89c6551149c197816dacdcc12c518b29ff1c533751b2dc4b976
EXPECTED_ASM_SHA256=769ac2d73d09b7cc5479acdeb9f168c1772743420ffca2d9e990a9b0348d2836
GO_TOOL_DIR=$(env -u GOROOT GOENV=off GOTOOLCHAIN=local "$GO_BIN" env GOTOOLDIR)
EXPECTED_TOOLCHAIN=$(printf '%s\n' \
"$EXPECTED_GO_SHA256 go" \
Expand Down