Copilot commented on code in PR #185:
URL: https://github.com/apache/skywalking-swck/pull/185#discussion_r2969401223


##########
adapter/go.mod:
##########
@@ -1,6 +1,8 @@
 module github.com/apache/skywalking-swck/adapter
 
-go 1.25.5
+go 1.25

Review Comment:
   `go` directive was changed from a patch version to `go 1.25` while the PR 
goal is to require a patched Go stdlib (1.25.8). With `go 1.25`, builds can 
still succeed on older 1.25.x toolchains if `GOTOOLCHAIN=local` is used, which 
undermines the CVE remediation intent. Consider setting the `go` directive to 
`1.25.8` (and keep/adjust the `toolchain` line as desired) to enforce the 
minimum patched toolchain version consistently.
   ```suggestion
   go 1.25.8
   ```



-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to