tiennm99 9710524ced fix(ci): require the Go release that patches encoding/xml ...

govulncheck fails the pipeline on GO-2026-6088: encoding/xml decodes
without a recursion depth guard, reachable from excelize's OpenFile,
GetRows and GetSheetList and from buildCRFixups directly. The parser is
fed spreadsheets downloaded over the network by the crawler, so the path
is real.

Raising the go directive to 1.26.6 in all three modules puts the fix
below every build rather than leaving it to whichever patch release the
runner happens to install.

govulncheck is clean on all three modules, and every suite passes on the
new toolchain — including the reader fidelity sweep, which matters here
because buildCRFixups depends on how encoding/xml normalises line endings.

2026-08-14 10:44:26 +07:00

..

cmd/crawl

refactor: one directory per pipeline stage, and an assembler to drive them

2026-08-13 22:50:05 +07:00

internal

refactor: comments state current behavior, not project history

2026-08-14 09:40:41 +07:00

go.mod

fix(ci): require the Go release that patches encoding/xml

2026-08-14 10:44:26 +07:00

go.sum

refactor(crawler): read the file lists from the source articles

2026-08-13 22:05:07 +07:00