Public commit record
40/100 · Thin
What the developer wrote
Authored by ziggie
build: bump Go versions
✓ Subject identifies a change✓ Uses a recognizable type or scope! No meaningful explanatory body
What changed, and why it matters
This commit simply updates the Go compiler and toolchain versions used to build LND from 1.25.10/1.26.3 to 1.25.11/1.26.4 across many configuration files, Docker images, and documentation. It contains no direct code changes. Such patch-level Go bumps are typically routine maintenance that may include upstream security fixes in the Go runtime, but the commit itself does not describe any specific vulnerability or attack.
Recommended action
Treat as a standard maintenance update. Verify that CI, release builds, and Docker images build correctly with Go 1.26.4. Review the Go 1.26.4 and 1.25.11 release notes for any relevant runtime or standard-library security fixes, and consider whether users running self-compiled binaries need to rebuild with the new Go version. No urgent security action is indicated by the commit itself.
Security signals we found
01
Routine patch-level Go toolchain bump
02
No LND application code or dependency changes
03
May inherit upstream Go security fixes, but none are named in the commit
04
No explicit security relevance stated by the vendor
Evidence from the diff
The diff is a mechanical version bump: go.mod directives and documentation move from Go 1.25.10 to 1.25.11, while CI workflows, Dockerfiles, and the Makefile reference version move from 1.26.3 to 1.26.4. No LND source code, logic, or dependency versions are changed. The change increases the likelihood that builds and releases use a Go patch release that fixes bugs or security issues in the standard library/runtime, but the commit message does not identify any specific CVE or security issue.
Changed components
CI/CD workflows (.github/workflows/*.yml, .github/actions/setup-go/action.yml)Docker build images (Dockerfile, dev.Dockerfile, docker/btcd/Dockerfile, lnrpc/Dockerfile, make/builder.Dockerfile, tools/Dockerfile)Build tooling (Makefile, .golangci.yml, lnrpc/gen_protos_docker.sh)Go module directives (go.mod files across actor, cert, clock, fn, healthcheck, kvdb, queue, sqldb, sqldb/v2, ticker, tlv, tools, tools/linters, tor)Documentation (docs/INSTALL.md, mobile/README.md)Inspect captured patch +38 / −38
diff --git a/.github/actions/setup-go/action.yml b/.github/actions/setup-go/action.yml
index 7a08688..5d7275f 100644
--- a/.github/actions/setup-go/action.yml
+++ b/.github/actions/setup-go/action.yml
@@ -52,7 +52,7 @@ runs:
# The key is used to create and later look up the cache. It's made of
# four parts:
# - The base part is made from the OS name, Go version and a
- # job-specified key prefix. Example: `linux-go-1.26.3-unit-test-`.
+ # job-specified key prefix. Example: `linux-go-1.26.4-unit-test-`.
# It ensures that a job running on Linux with Go 1.26 only looks for
# caches from the same environment.
# - The unique part is the `hashFiles('**/go.sum')`, which calculates a
diff --git a/.github/workflows/govulncheck.yml b/.github/workflows/govulncheck.yml
index ec18b10..75f6597 100644
--- a/.github/workflows/govulncheck.yml
+++ b/.github/workflows/govulncheck.yml
@@ -40,7 +40,7 @@ defaults:
env:
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
- GO_VERSION: 1.26.3
+ GO_VERSION: 1.26.4
jobs:
govulncheck:
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 089c775..85553fc 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -41,7 +41,7 @@ env:
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
- GO_VERSION: 1.26.3
+ GO_VERSION: 1.26.4
jobs:
static-checks:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 088c2cb..8e5de51 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -12,7 +12,7 @@ defaults:
env:
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
- GO_VERSION: 1.26.3
+ GO_VERSION: 1.26.4
jobs:
########################
diff --git a/.golangci.yml b/.golangci.yml
index 7d3b1a5..58c0110 100644
--- a/.golangci.yml
+++ b/.golangci.yml
@@ -3,7 +3,7 @@ version: "2"
run:
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
- go: "1.26.3"
+ go: "1.26.4"
# Abort after 10 minutes.
timeout: 10m
diff --git a/Dockerfile b/Dockerfile
index 30353ad..cccb2ae 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.3-alpine as builder
+FROM golang:1.26.4-alpine as builder
# Force Go to use the cgo based DNS resolver. This is required to ensure DNS
# queries required to connect to linked containers succeed.
diff --git a/Makefile b/Makefile
index 559a2e0..9121384 100644
--- a/Makefile
+++ b/Makefile
@@ -36,7 +36,7 @@ ACTIVE_GO_VERSION_MINOR := $(shell echo $(ACTIVE_GO_VERSION) | cut -d. -f2)
# GO_VERSION is the Go version used for the release build, docker files, and
# GitHub Actions. This is the reference version for the project. All other Go
# versions are checked against this version.
-GO_VERSION = 1.26.3
+GO_VERSION = 1.26.4
GOBUILD := $(GOCC) build -v
GOINSTALL := $(GOCC) install -v
diff --git a/actor/go.mod b/actor/go.mod
index bf5a392..8949ca0 100644
--- a/actor/go.mod
+++ b/actor/go.mod
@@ -1,6 +1,6 @@
module github.com/lightningnetwork/lnd/actor
-go 1.25.10
+go 1.25.11
require (
github.com/btcsuite/btclog/v2 v2.0.1-0.20250602222548-9967d19bb084
diff --git a/cert/go.mod b/cert/go.mod
index 5bef041..a300467 100644
--- a/cert/go.mod
+++ b/cert/go.mod
@@ -1,6 +1,6 @@
module github.com/lightningnetwork/lnd/cert
-go 1.25.10
+go 1.25.11
require github.com/stretchr/testify v1.8.2
diff --git a/clock/go.mod b/clock/go.mod
index ed65a5b..6c3afbc 100644
--- a/clock/go.mod
+++ b/clock/go.mod
@@ -1,6 +1,6 @@
module github.com/lightningnetwork/lnd/clock
-go 1.25.10
+go 1.25.11
require github.com/stretchr/testify v1.8.2
diff --git a/dev.Dockerfile b/dev.Dockerfile
index 999b2e7..8270962 100644
--- a/dev.Dockerfile
+++ b/dev.Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.3-alpine AS builder
+FROM golang:1.26.4-alpine AS builder
LABEL maintainer="Olaoluwa Osuntokun <laolu@lightning.engineering>"
diff --git a/docker/btcd/Dockerfile b/docker/btcd/Dockerfile
index a4b2301..9b05758 100644
--- a/docker/btcd/Dockerfile
+++ b/docker/btcd/Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.3-alpine AS builder
+FROM golang:1.26.4-alpine AS builder
LABEL maintainer="Olaoluwa Osuntokun <laolu@lightning.engineering>"
diff --git a/docs/INSTALL.md b/docs/INSTALL.md
index 0c2f33b..50bab9f 100644
--- a/docs/INSTALL.md
+++ b/docs/INSTALL.md
@@ -93,7 +93,7 @@ following build dependencies are required:
### Installing Go
-`lnd` is written in Go, with a minimum version of `1.25.10` (or, in case this
+`lnd` is written in Go, with a minimum version of `1.25.11` (or, in case this
document gets out of date, whatever the Go version in the main `go.mod` file
requires). To install, run one of the following commands for your OS:
@@ -101,15 +101,15 @@ requires). To install, run one of the following commands for your OS:
<summary>Linux (x86-64)</summary>
```
- wget https://dl.google.com/go/go1.25.10.linux-amd64.tar.gz
- echo "42d4f7a32316aa66591eca7e89867256057a4264451aca10570a715b3637ba70 go1.25.10.linux-amd64.tar.gz" | sha256sum --check
+ wget https://dl.google.com/go/go1.25.11.linux-amd64.tar.gz
+ echo "34f14304e856893f4ba30c2cacfe93906e9de7915c5f6aaaf3a81cdccd7ba30b go1.25.11.linux-amd64.tar.gz" | sha256sum --check
```
- The command above should output `go1.25.10.linux-amd64.tar.gz: OK`. If it
+ The command above should output `go1.25.11.linux-amd64.tar.gz: OK`. If it
doesn't, then the target REPO HAS BEEN MODIFIED, and you shouldn't install
this version of Go. If it matches, then proceed to install Go:
```
- sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.25.10.linux-amd64.tar.gz
+ sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.25.11.linux-amd64.tar.gz
export PATH=$PATH:/usr/local/go/bin
```
</details>
@@ -118,15 +118,15 @@ requires). To install, run one of the following commands for your OS:
<summary>Linux (ARMv6)</summary>
```
- wget https://dl.google.com/go/go1.25.10.linux-armv6l.tar.gz
- echo "39f168f158e693887d3ad006168af1b1a3007b19c5993cae4d9d57f82f52aaf8 go1.25.10.linux-armv6l.tar.gz" | sha256sum --check
+ wget https://dl.google.com/go/go1.25.11.linux-armv6l.tar.gz
+ echo "492d69badee59cae12e9a36282dfce94041bd4aac88fdddea575a7d99a2bd05d go1.25.11.linux-armv6l.tar.gz" | sha256sum --check
```
- The command above should output `go1.25.10.linux-armv6l.tar.gz: OK`. If it
+ The command above should output `go1.25.11.linux-armv6l.tar.gz: OK`. If it
isn't, then the target REPO HAS BEEN MODIFIED, and you shouldn't install
this version of Go. If it matches, then proceed to install Go:
```
- sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.25.10.linux-armv6l.tar.gz
+ sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.25.11.linux-armv6l.tar.gz
export PATH=$PATH:/usr/local/go/bin
```
diff --git a/fn/go.mod b/fn/go.mod
index 471655d..7be39f6 100644
--- a/fn/go.mod
+++ b/fn/go.mod
@@ -1,6 +1,6 @@
module github.com/lightningnetwork/lnd/fn/v2
-go 1.25.10
+go 1.25.11
require (
github.com/stretchr/testify v1.8.1
diff --git a/go.mod b/go.mod
index 7dc930d..0a0baeb 100644
--- a/go.mod
+++ b/go.mod
@@ -214,6 +214,6 @@ replace google.golang.org/protobuf => github.com/lightninglabs/protobuf-go-hex-d
// If you change this please also update docs/INSTALL.md and all other go.mod
// files. The release build toolchain version is tracked separately by
// GO_VERSION in Makefile.
-go 1.25.10
+go 1.25.11
retract v0.0.2
diff --git a/healthcheck/go.mod b/healthcheck/go.mod
index 8ff703a..5005618 100644
--- a/healthcheck/go.mod
+++ b/healthcheck/go.mod
@@ -24,4 +24,4 @@ require (
gopkg.in/yaml.v3 v3.0.1 // indirect
)
-go 1.25.10
+go 1.25.11
diff --git a/kvdb/go.mod b/kvdb/go.mod
index ab69421..346f9e2 100644
--- a/kvdb/go.mod
+++ b/kvdb/go.mod
@@ -147,4 +147,4 @@ replace github.com/ulikunitz/xz => github.com/ulikunitz/xz v0.5.11
// https://deps.dev/advisory/OSV/GO-2021-0053?from=%2Fgo%2Fgithub.com%252Fgogo%252Fprotobuf%2Fv1.3.1
replace github.com/gogo/protobuf => github.com/gogo/protobuf v1.3.2
-go 1.25.10
+go 1.25.11
diff --git a/lnrpc/Dockerfile b/lnrpc/Dockerfile
index cd51a12..8d24e37 100644
--- a/lnrpc/Dockerfile
+++ b/lnrpc/Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.3-bookworm
+FROM golang:1.26.4-bookworm
RUN apt-get update && apt-get install -y \
git \
diff --git a/lnrpc/gen_protos_docker.sh b/lnrpc/gen_protos_docker.sh
index 4b4071d..a79ce5f 100755
--- a/lnrpc/gen_protos_docker.sh
+++ b/lnrpc/gen_protos_docker.sh
@@ -6,7 +6,7 @@ set -e
DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
# golang docker image version used in this script.
-GO_IMAGE=docker.io/library/golang:1.26.3-alpine
+GO_IMAGE=docker.io/library/golang:1.26.4-alpine
PROTOBUF_VERSION=$(docker run --rm -v $DIR/../:/lnd -w /lnd $GO_IMAGE \
go list -f '{{.Version}}' -m google.golang.org/protobuf)
diff --git a/make/builder.Dockerfile b/make/builder.Dockerfile
index 4e043a0..9a45d21 100644
--- a/make/builder.Dockerfile
+++ b/make/builder.Dockerfile
@@ -1,6 +1,6 @@
# If you change this please also update GO_VERSION in Makefile (then run
# `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.3-bookworm
+FROM golang:1.26.4-bookworm
MAINTAINER Olaoluwa Osuntokun <laolu@lightning.engineering>
diff --git a/mobile/README.md b/mobile/README.md
index d8627f7..38beb58 100644
--- a/mobile/README.md
+++ b/mobile/README.md
@@ -103,7 +103,7 @@ following commands:
```
RUN apt-get install -y wget \
- && wget -c https://golang.org/dl/go1.17.6.linux-amd64.tar.gz -O - \
+ && wget -c https://dl.google.com/go/go1.26.4.linux-amd64.tar.gz -O - \
| tar -xz -C /usr/local
ENV GOPATH=/go
ENV PATH=$PATH:/usr/local/go/bin:/go/bin
diff --git a/queue/go.mod b/queue/go.mod
index 93cde11..7d97d99 100644
--- a/queue/go.mod
+++ b/queue/go.mod
@@ -1,6 +1,6 @@
module github.com/lightningnetwork/lnd/queue
-go 1.25.10
+go 1.25.11
require (
github.com/lightningnetwork/lnd/fn/v2 v2.0.8
diff --git a/sqldb/go.mod b/sqldb/go.mod
index a6779b5..8fd89e5 100644
--- a/sqldb/go.mod
+++ b/sqldb/go.mod
@@ -72,4 +72,4 @@ require (
modernc.org/token v1.1.0 // indirect
)
-go 1.25.10
+go 1.25.11
diff --git a/sqldb/v2/go.mod b/sqldb/v2/go.mod
index dd89427..5b78816 100644
--- a/sqldb/v2/go.mod
+++ b/sqldb/v2/go.mod
@@ -71,4 +71,4 @@ require (
// did not yet make it into the upstream repository.
replace github.com/golang-migrate/migrate/v4 => github.com/lightninglabs/migrate/v4 v4.18.2-9023d66a-fork-pr-2.0.20251211093704-71c1eef09789
-go 1.25.10
+go 1.25.11
diff --git a/ticker/go.mod b/ticker/go.mod
index 9c5a634..51f1e26 100644
--- a/ticker/go.mod
+++ b/ticker/go.mod
@@ -1,3 +1,3 @@
module github.com/lightningnetwork/lnd/ticker
-go 1.25.10
+go 1.25.11
diff --git a/tlv/go.mod b/tlv/go.mod
index ccfaca5..d6da562 100644
--- a/tlv/go.mod
+++ b/tlv/go.mod
@@ -22,4 +22,4 @@ require (
gopkg.in/yaml.v3 v3.0.1 // indirect
)
-go 1.25.10
+go 1.25.11
diff --git a/tools/Dockerfile b/tools/Dockerfile
index eb60bc7..95de054 100644
--- a/tools/Dockerfile
+++ b/tools/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26.3
+FROM golang:1.26.4
RUN apt-get update && apt-get install -y git
ENV GOCACHE=/tmp/build/.cache
diff --git a/tools/go.mod b/tools/go.mod
index 077c83b..6b318f1 100644
--- a/tools/go.mod
+++ b/tools/go.mod
@@ -1,6 +1,6 @@
module github.com/lightningnetwork/lnd/tools
-go 1.25.10
+go 1.25.11
require (
4d63.com/gocheckcompilerdirectives v1.3.0 // indirect
diff --git a/tools/linters/go.mod b/tools/linters/go.mod
index 82ce03d..6f3b312 100644
--- a/tools/linters/go.mod
+++ b/tools/linters/go.mod
@@ -1,6 +1,6 @@
module github.com/lightningnetwork/lnd/tools/linters
-go 1.25.10
+go 1.25.11
require (
github.com/golangci/plugin-module-register v0.1.1
diff --git a/tor/go.mod b/tor/go.mod
index 198a0b2..e96477c 100644
--- a/tor/go.mod
+++ b/tor/go.mod
@@ -23,4 +23,4 @@ require (
gopkg.in/yaml.v3 v3.0.1 // indirect
)
-go 1.25.10
+go 1.25.11
Risk score
Our methodology →Why this scored 34/100
Human-validated context
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
No validated notes yet.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.