IceS2 opened a new issue, #4711:
URL: https://github.com/apache/arrow-adbc/issues/4711
### What feature or improvement would you like to see?
The Linux x86_64 wheel for `adbc-driver-flightsql==1.12.0` contains
`adbc_driver_flightsql/libadbc_driver_flightsql.so`, which was built with Go
1.26.5:
```text
$ go version -m libadbc_driver_flightsql.so
libadbc_driver_flightsql.so: go1.26.5
Running the official Go vulnerability checker against that binary reports
six symbol-level vulnerabilities:
- GO-2026-6218 (net/url)
- GO-2026-6091 (html/template)
- GO-2026-6090 (crypto/tls)
- GO-2026-5972 (encoding/asn1)
- GO-2026-5942 (net)
- GO-2026-5026 (net/http)
```
All are fixed by Go 1.26.6, released on 2026-08-13:
https://groups.google.com/g/golang-announce/c/94pEornpRlI
The current go/adbc/go.mod still specifies:
toolchain go1.26.5
Could you please:
1. bump the toolchain to Go 1.26.6
2. publish a new adbc-driver-flightsql release whose wheels are built with
Go 1.26.6?
This is similar to #3967 and the earlier toolchain bump in #4489.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
