More security updates.

[jeff-cohere]

Updates the Go version, some Go packages, and the Docker images to address security vulnerabilities. Shouldn't affect any functionality.

The test failure indicates that NMDC is unavailable, but other things seem like they're working. I think we can merge as is.

[github-actions]

PR Preview Action v1.8.1
🚀 View preview at https://kbase.github.io/dts/pr-preview/pr-240/
Built to branch gh-pages at 2026-08-28 15:11 UTC. Preview will be ready when the GitHub Pages deployment is complete.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 65.86%. Comparing base (55fce4a) to head (2dfa1fc).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #240      +/-   ##
==========================================
+ Coverage   59.18%   65.86%   +6.68%     
==========================================
  Files          35       35              
  Lines        4773     4213     -560     
==========================================
- Hits         2825     2775      -50     
+ Misses       1616     1438     -178     
+ Partials      332        0     -332     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[Copilot]

Pull request overview

Updates the Go toolchain and selected Go dependencies / container base images, primarily to address security vulnerabilities without intended functional changes.

Changes:

• Bump golang.org/x/net to v0.56.0 and golang.org/x/sys to v0.46.0 (with corresponding go.sum and vendored updates).
• Update CI to use Go ^1.27 for PR/push builds.
• Update Docker build/runtime images to golang:1.27.0-alpine and alpine:3.24.1.

Reviewed changes

Copilot reviewed 3 out of 21 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
vendor/modules.txt	Updates vendored module version records for x/net and x/sys.
vendor/golang.org/x/sys/unix/ztypes_linux.go	Vendored x/sys update adds GPIO v2 ioctl constants and related types.
vendor/golang.org/x/sys/unix/ztypes_linux_sparc64.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for sparc64.
vendor/golang.org/x/sys/unix/ztypes_linux_s390x.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for s390x.
vendor/golang.org/x/sys/unix/ztypes_linux_riscv64.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for riscv64.
vendor/golang.org/x/sys/unix/ztypes_linux_ppc64le.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for ppc64le.
vendor/golang.org/x/sys/unix/ztypes_linux_ppc64.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for ppc64.
vendor/golang.org/x/sys/unix/ztypes_linux_ppc.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for ppc.
vendor/golang.org/x/sys/unix/ztypes_linux_mipsle.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for mipsle.
vendor/golang.org/x/sys/unix/ztypes_linux_mips64le.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for mips64le.
vendor/golang.org/x/sys/unix/ztypes_linux_mips64.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for mips64.
vendor/golang.org/x/sys/unix/ztypes_linux_mips.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for mips.
vendor/golang.org/x/sys/unix/ztypes_linux_loong64.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for loong64.
vendor/golang.org/x/sys/unix/ztypes_linux_arm64.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for arm64.
vendor/golang.org/x/sys/unix/ztypes_linux_arm.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for arm.
vendor/golang.org/x/sys/unix/ztypes_linux_amd64.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for amd64.
vendor/golang.org/x/sys/unix/ztypes_linux_386.go	Vendored x/sys update adds GPIO_GET_CHIPINFO_IOCTL for 386.
go.sum	Updates checksums for golang.org/x/net and golang.org/x/sys version bumps.
go.mod	Bumps required versions of golang.org/x/net and indirect golang.org/x/sys.
deployment/Dockerfile	Updates builder/runtime base images (Go + Alpine) used for the deployed container.
.github/workflows/autotest_prs.yml	Updates CI setup-go version selection to Go ^1.27.

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.