v1.6.0
Dependency and CI release.
github.com/xraph/forge→ v1.9.2 (bastion: from v1.6.5)- grove, vessel, confy, go-utils, forgeui brought up to current
github.com/jackc/pgx/v5→ v5.10.0, patching GO-2026-5004, a reachable vulnerability reached through grove's pgdriver- gosec findings triaged: real fixes where warranted, annotated with rationale where they were false positives
- CI migrated to
xraph/workflowsgo-ci.yml@v1(test, lint, verify, gosec, govulncheck) - Go toolchain version now read from
go.modin every workflow