Informational 15 Bitcoin Committed Aug 19, 2026 · 14:05 UTC

Merge pull request #11098 from ziggie1984/agent/bump-go-1.25.13-toolchain-1.26.6

eac5a5b8 View source ↗

Public commit record

What the developer wrote

Authored by Yong

73/100 · Adequate

Merge pull request #11098 from ziggie1984/agent/bump-go-1.25.13-toolchain-1.26.6

build: bump Go language to 1.25.13 and toolchain to 1.26.6

✓ Specific, descriptive subject✓ Names a concrete action or component✓ Provides an explanatory body✓ Links an issue, advisory, or supporting reference

The short version

What changed, and why it matters

This commit is a routine maintenance update that changes the version numbers of the Go programming language used to build LND from 1.25.11 to 1.25.13 (and the build toolchain from 1.26.4 to 1.26.6). It only edits configuration files, Dockerfiles, documentation, and module files. There is no code change, no bug fix, and no security patch visible in the diff.

Recommended action

No immediate security action is required. Treat this as a standard dependency/toolchain maintenance update. If the project tracks Go security releases, verify separately whether Go 1.25.13 or 1.26.6 addresses any CVEs and consider applying the update through normal release processes.

Security signals we found

No strong security signals were identified.

Technical analysis

Evidence from the diff

The commit bumps the declared Go language version across all go.mod files from 1.25.11 to 1.25.13 and the release/CI/build toolchain version from 1.26.4 to 1.26.6. Affected files include go.mod, submodule go.mod files, GitHub Actions workflows, Dockerfiles, Makefile, golangci-lint config, and install documentation. The diff contains only version-string replacements; no application source code, dependency updates, or vulnerability fixes are present.

Changed components

Build configuration (go.mod, submodule go.mod files)CI/CD workflows (.github/workflows/*.yml, .github/actions/setup-go/action.yml)

Container images (Dockerfile, dev.Dockerfile, docker/btcd/Dockerfile, lnrpc/Dockerfile, make/builder.Dockerfile, tools/Dockerfile)

Build tooling (Makefile, .golangci.yml, lnrpc/gen_protos_docker.sh)Documentation (docs/INSTALL.md, mobile/README.md)

Inspect captured patch +38 / −38

### .github/actions/setup-go/action.yml
@@ -52,7 +52,7 @@ runs:
         # The key is used to create and later look up the cache. It's made of
         # four parts:
         # - The base part is made from the OS name, Go version and a
-        #   job-specified key prefix. Example: `linux-go-1.26.4-unit-test-`.
+        #   job-specified key prefix. Example: `linux-go-1.26.6-unit-test-`.
         #   It ensures that a job running on Linux with Go 1.26 only looks for
         #   caches from the same environment.
         # - The unique part is the `hashFiles('**/go.sum')`, which calculates a

### .github/workflows/govulncheck.yml
@@ -40,7 +40,7 @@ defaults:
 env:
   # If you change this please also update GO_VERSION in Makefile (then run
   # `make lint` to see where else it needs to be updated as well).
-  GO_VERSION: 1.26.4
+  GO_VERSION: 1.26.6
 
 jobs:
   govulncheck:

### .github/workflows/main.yml
@@ -41,7 +41,7 @@ env:
 
   # If you change this please also update GO_VERSION in Makefile (then run
   # `make lint` to see where else it needs to be updated as well).
-  GO_VERSION: 1.26.4
+  GO_VERSION: 1.26.6
 
 jobs:
   static-checks:

### .github/workflows/release.yaml
@@ -12,7 +12,7 @@ defaults:
 env:
   # If you change this please also update GO_VERSION in Makefile (then run
   # `make lint` to see where else it needs to be updated as well).
-  GO_VERSION: 1.26.4
+  GO_VERSION: 1.26.6
 
 jobs:
   ########################

### .golangci.yml
@@ -3,7 +3,7 @@ version: "2"
 run:
   # If you change this please also update GO_VERSION in Makefile (then run
   # `make lint` to see where else it needs to be updated as well).
-  go: "1.26.4"
+  go: "1.26.6"
 
   # Abort after 10 minutes.
   timeout: 10m

### Dockerfile
@@ -1,6 +1,6 @@
 # If you change this please also update GO_VERSION in Makefile (then run
 # `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.4-alpine as builder
+FROM golang:1.26.6-alpine as builder
 
 # Force Go to use the cgo based DNS resolver. This is required to ensure DNS
 # queries required to connect to linked containers succeed.

### Makefile
@@ -36,7 +36,7 @@ ACTIVE_GO_VERSION_MINOR := $(shell echo $(ACTIVE_GO_VERSION) | cut -d. -f2)
 # GO_VERSION is the Go version used for the release build, docker files, and
 # GitHub Actions. This is the reference version for the project. All other Go
 # versions are checked against this version.
-GO_VERSION = 1.26.4
+GO_VERSION = 1.26.6
 
 GOBUILD := $(GOCC) build -v
 GOINSTALL := $(GOCC) install -v

### actor/go.mod
@@ -1,6 +1,6 @@
 module github.com/lightningnetwork/lnd/actor
 
-go 1.25.11
+go 1.25.13
 
 require (
 	github.com/btcsuite/btclog/v2 v2.0.1-0.20250602222548-9967d19bb084

### cert/go.mod
@@ -1,6 +1,6 @@
 module github.com/lightningnetwork/lnd/cert
 
-go 1.25.11
+go 1.25.13
 
 require github.com/stretchr/testify v1.8.2
 

### clock/go.mod
@@ -1,6 +1,6 @@
 module github.com/lightningnetwork/lnd/clock
 
-go 1.25.11
+go 1.25.13
 
 require github.com/stretchr/testify v1.8.2
 

### dev.Dockerfile
@@ -1,6 +1,6 @@
 # If you change this please also update GO_VERSION in Makefile (then run
 # `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.4-alpine AS builder
+FROM golang:1.26.6-alpine AS builder
 
 LABEL maintainer="Olaoluwa Osuntokun <laolu@lightning.engineering>"
 

### docker/btcd/Dockerfile
@@ -1,6 +1,6 @@
 # If you change this please also update GO_VERSION in Makefile (then run
 # `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.4-alpine AS builder
+FROM golang:1.26.6-alpine AS builder
 
 LABEL maintainer="Olaoluwa Osuntokun <laolu@lightning.engineering>"
 

### docs/INSTALL.md
@@ -93,23 +93,23 @@ following build dependencies are required:
 
 ### Installing Go
 
-`lnd` is written in Go, with a minimum version of `1.25.11` (or, in case this
+`lnd` is written in Go, with a minimum version of `1.25.13` (or, in case this
 document gets out of date, whatever the Go version in the main `go.mod` file
 requires). To install, run one of the following commands for your OS:
 
 <details>
   <summary>Linux (x86-64)</summary>
 
   ```
-  wget https://dl.google.com/go/go1.25.11.linux-amd64.tar.gz
-  echo "34f14304e856893f4ba30c2cacfe93906e9de7915c5f6aaaf3a81cdccd7ba30b  go1.25.11.linux-amd64.tar.gz" | sha256sum --check
+  wget https://dl.google.com/go/go1.25.13.linux-amd64.tar.gz
+  echo "39042a078ea9ceebe3ecda4a7188f0f5b96e14a071d27923ba7f40b456e85ae3  go1.25.13.linux-amd64.tar.gz" | sha256sum --check
   ```
 
-  The command above should output `go1.25.11.linux-amd64.tar.gz: OK`. If it
+  The command above should output `go1.25.13.linux-amd64.tar.gz: OK`. If it
   doesn't, then the target REPO HAS BEEN MODIFIED, and you shouldn't install
   this version of Go. If it matches, then proceed to install Go:
   ```
-  sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.25.11.linux-amd64.tar.gz
+  sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.25.13.linux-amd64.tar.gz
   export PATH=$PATH:/usr/local/go/bin
   ```
 </details>
@@ -118,15 +118,15 @@ requires). To install, run one of the following commands for your OS:
   <summary>Linux (ARMv6)</summary>
 
   ```
-  wget https://dl.google.com/go/go1.25.11.linux-armv6l.tar.gz
-  echo "492d69badee59cae12e9a36282dfce94041bd4aac88fdddea575a7d99a2bd05d  go1.25.11.linux-armv6l.tar.gz" | sha256sum --check
+  wget https://dl.google.com/go/go1.25.13.linux-armv6l.tar.gz
+  echo "f98ba3beb03a5c269d0115c7f8573483c139be88ce9989e53aff336826d13f5c  go1.25.13.linux-armv6l.tar.gz" | sha256sum --check
   ```
 
-  The command above should output `go1.25.11.linux-armv6l.tar.gz: OK`. If it
+  The command above should output `go1.25.13.linux-armv6l.tar.gz: OK`. If it
   isn't, then the target REPO HAS BEEN MODIFIED, and you shouldn't install
   this version of Go. If it matches, then proceed to install Go:
   ```
-  sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.25.11.linux-armv6l.tar.gz
+  sudo rm -rf /usr/local/go && sudo tar -C /usr/local -xzf go1.25.13.linux-armv6l.tar.gz
   export PATH=$PATH:/usr/local/go/bin
   ```
 

### fn/go.mod
@@ -1,6 +1,6 @@
 module github.com/lightningnetwork/lnd/fn/v2
 
-go 1.25.11
+go 1.25.13
 
 require (
 	github.com/stretchr/testify v1.8.1

### go.mod
@@ -217,7 +217,7 @@ replace google.golang.org/protobuf => github.com/lightninglabs/protobuf-go-hex-d
 // If you change this please also update docs/INSTALL.md and all other go.mod
 // files. The release build toolchain version is tracked separately by
 // GO_VERSION in Makefile.
-go 1.25.11
+go 1.25.13
 
 retract v0.0.2
 

### healthcheck/go.mod
@@ -23,4 +23,4 @@ require (
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
 
-go 1.25.11
+go 1.25.13

### kvdb/go.mod
@@ -143,4 +143,4 @@ require (
 	sigs.k8s.io/yaml v1.2.0 // indirect
 )
 
-go 1.25.11
+go 1.25.13

### lnrpc/Dockerfile
@@ -1,6 +1,6 @@
 # If you change this please also update GO_VERSION in Makefile (then run
 # `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.4-bookworm
+FROM golang:1.26.6-bookworm
 
 RUN apt-get update && apt-get install -y \
   git \

### lnrpc/gen_protos_docker.sh
@@ -6,7 +6,7 @@ set -e
 DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
 
 # golang docker image version used in this script.
-GO_IMAGE=docker.io/library/golang:1.26.4-alpine
+GO_IMAGE=docker.io/library/golang:1.26.6-alpine
 
 PROTOBUF_VERSION=$(docker run --rm -v $DIR/../:/lnd -w /lnd $GO_IMAGE \
 	go list -f '{{.Version}}' -m google.golang.org/protobuf)

### make/builder.Dockerfile
@@ -1,6 +1,6 @@
 # If you change this please also update GO_VERSION in Makefile (then run
 # `make lint` to see where else it needs to be updated as well).
-FROM golang:1.26.4-bookworm
+FROM golang:1.26.6-bookworm
 
 MAINTAINER Olaoluwa Osuntokun <laolu@lightning.engineering>
 

### mobile/README.md
@@ -103,7 +103,7 @@ following commands:
 
 ```
 RUN apt-get install -y wget \
-    && wget -c https://dl.google.com/go/go1.26.4.linux-amd64.tar.gz -O - \
+    && wget -c https://dl.google.com/go/go1.26.6.linux-amd64.tar.gz -O - \
     | tar -xz -C /usr/local
 ENV GOPATH=/go
 ENV PATH=$PATH:/usr/local/go/bin:/go/bin

### queue/go.mod
@@ -1,6 +1,6 @@
 module github.com/lightningnetwork/lnd/queue
 
-go 1.25.11
+go 1.25.13
 
 require (
 	github.com/lightningnetwork/lnd/fn/v2 v2.0.8

### sqldb/go.mod
@@ -71,4 +71,4 @@ require (
 	modernc.org/token v1.1.0 // indirect
 )
 
-go 1.25.11
+go 1.25.13

### sqldb/v2/go.mod
@@ -70,4 +70,4 @@ require (
 // did not yet make it into the upstream repository.
 replace github.com/golang-migrate/migrate/v4 => github.com/lightninglabs/migrate/v4 v4.18.2-9023d66a-fork-pr-2.0.20251211093704-71c1eef09789
 
-go 1.25.11
+go 1.25.13

### ticker/go.mod
@@ -1,3 +1,3 @@
 module github.com/lightningnetwork/lnd/ticker
 
-go 1.25.11
+go 1.25.13

### tlv/go.mod
@@ -22,4 +22,4 @@ require (
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
 
-go 1.25.11
+go 1.25.13

### tools/Dockerfile
@@ -1,4 +1,4 @@
-FROM golang:1.26.4
+FROM golang:1.26.6
 
 RUN apt-get update && apt-get install -y git
 ENV GOCACHE=/tmp/build/.cache

### tools/go.mod
@@ -1,6 +1,6 @@
 module github.com/lightningnetwork/lnd/tools
 
-go 1.25.11
+go 1.25.13
 
 require (
 	4d63.com/gocheckcompilerdirectives v1.3.0 // indirect

### tools/linters/go.mod
@@ -1,6 +1,6 @@
 module github.com/lightningnetwork/lnd/tools/linters
 
-go 1.25.11
+go 1.25.13
 
 require (
 	github.com/golangci/plugin-module-register v0.1.1

### tor/go.mod
@@ -25,4 +25,4 @@ require (
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
 
-go 1.25.11
+go 1.25.13

Risk score

Why this scored 15/100

Our methodology →

Potential impact 0/30

Exploitability 0/25

Stealth signal 0/15

Affected reach 0/15

Confidence 10/10

Evidence quality 5/5

Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.

What the developer wrote

What changed, and why it matters

Security signals we found

Evidence from the diff

Changed components

Why this scored 15/100

Community notes

Related watches

Merge pull request #11065 from ellemouton/agent/walletrpc-create-account

Merge pull request #8754 from ViktorT-11/2024-05-add-outbound-remote-signer

Merge pull request #11075 from ziggie1984/agent/fix-transaction-pagination-overflow