[zzwong]

Add toolchain go1.26.10 to every Go module so CI and release builds use Go 1.26.10. Go 1.26.10 and 1.27.3 add a crypto/x509 distrust of the compromised eMudhra intermediate keys (CVE-2026-111943), which applies whatever root store the binary verifies against. Binaries built with earlier releases still accept certificates issued through those keys on Linux, where verification uses the system roots.

actions/setup-go uses the toolchain directive in preference to the go directive, so builds, tests and releases all pick it up. The go language version is unchanged.

Verification

GOTOOLCHAIN=go1.26.10 go build ./... passes for every module.

[monit-reviewer]

Automated PR Review

Reviewed commit: c86ba25b98c2
Profile: claude-monit-reviewer - Posting as: monit-reviewer

Summary

Reviewer	Findings
automation:ci-deploy	0
security:code-auditor	0

Reviewer Coverage

• automation:ci-deploy — complete (broad); skipped: none; constraints: Only .github/workflows/ci.yml references a Go version (go-version-file: go.mod); no release workflow or goreleaser config was found in the checkout.
• security:code-auditor — complete (broad); skipped: none; constraints: Could not independently verify that Go 1.26.10 contains the CVE-2026-111943 fix; relied on the PR description. Release builds use a shared reusable workflow (release.yml) that was not inspected; could not confirm it honors the go.mod toolchain directive.

Inspected files (1)

• go.mod

0 PR discussion threads considered. 0 summarized; 0 resolved.

---

Completed in 3m 06s | ~$0.68 (est.) | claude-sonnet-5-5 | cr 0.10.325

Field	Value
Model	claude-sonnet-5-5
Reviewers	automation:ci-deploy, security:code-auditor
Engine	claude_cli · claude-sonnet-5-5
Reviewed by	cr · monit-reviewer
Duration	3m 06s wall · 4m 03s compute
Cost	~$0.68 (est.)
Pricing basis	baseline-2026-10-02/pricing
Tokens	28 in / 3.3k out

Per-workstream usage

• orchestrator-selection — claude-sonnet-5-5
  • In: 4
  • Out: 532
  • Cache read: 9.2k
  • Cache create: 33.2k
  • Cost: ~$0.14 (est.)
  • Duration: 13s
• automation:ci-deploy — claude-sonnet-5-5
  • In: 10
  • Out: 1.2k
  • Cache read: 107.0k
  • Cache create: 33.1k
  • Cost: ~$0.17 (est.)
  • Duration: 1m 15s
• security:code-auditor — claude-sonnet-5-5
  • In: 8
  • Out: 1.1k
  • Cache read: 82.4k
  • Cache create: 32.6k
  • Cost: ~$0.16 (est.)
  • Duration: 1m 29s
• orchestrator-rollup — claude-sonnet-5-5
  • In: 6
  • Out: 460
  • Cache read: 90.7k
  • Cache create: 48.3k
  • Cost: ~$0.22 (est.)
  • Duration: 1m 05s