Merge branch 'develop' (v0.8.1 — Go 1.26.5 govulncheck fix)

Author: hrodrig

CHANGELOG.md

@@ -11,7 +11,7 @@ This project adheres to [Semantic Versioning](https://semver.org/).
 
 ### Fixed
 
-- **Dockerfile:** Bump Go toolchain `golang:1.26.4-alpine` → `1.26.5-alpine`. Fixes GO-2026-4970 (High, stdlib) detected by `make docker-scan`.
+- **Go toolchain:** Bump `go.mod` and Dockerfile to **1.26.5** (was `go.mod` 1.26.4 / image `golang:1.26.4-alpine`). Fixes **GO-2026-4970** (High, stdlib; `make docker-scan`) and **GO-2026-5856** (`crypto/tls` ECH privacy leak; `govulncheck` in CI).
 
 ## [0.8.0] - 2026-06-26
 

README.md

@@ -7,7 +7,7 @@
 [![CI](https://github.com/hrodrig/gghstats/actions/workflows/ci.yml/badge.svg)](https://github.com/hrodrig/gghstats/actions)
 [![codecov](https://codecov.io/gh/hrodrig/gghstats/graph/badge.svg)](https://codecov.io/gh/hrodrig/gghstats)
 [![gghstats clones](https://gghstats.hermesrodriguez.com/api/v1/badge/hrodrig/gghstats?metric=clones)](https://gghstats.hermesrodriguez.com/hrodrig/gghstats)
-[![Go 1.26.4](https://img.shields.io/badge/go-1.26.4-00ADD8?logo=go)](https://go.dev/)
+[![Go 1.26.5](https://img.shields.io/badge/go-1.26.5-00ADD8?logo=go)](https://go.dev/)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
 [![pkg.go.dev](https://pkg.go.dev/badge/github.com/hrodrig/gghstats)](https://pkg.go.dev/github.com/hrodrig/gghstats)
 [![Go Report Card](https://goreportcard.com/badge/github.com/hrodrig/gghstats)](https://goreportcard.com/report/github.com/hrodrig/gghstats)

go.mod

@@ -1,6 +1,6 @@
 module github.com/hrodrig/gghstats
 
-go 1.26.4
+go 1.26.5
 
 require (
 	github.com/prometheus/client_golang v1.23.2