Update Go to 1.27.2

dep-flow botrequested to merge
dep-flow/pins into main

Pin updates, 2026-10-15

Opened by dep-flow's pins lane (https://gitlab.com/gitlab-org/ci-cd/runner-tools/dep-flow/-/pipelines/2952996246). Each commit takes the newest release of a trusted pin within its release line. Trusted pins get no screening verdict, so this MR's pipeline is the gate. Vulnerability fixes come first.

Review and merge are a person's: don't set auto-merge.

  1. Update Go to 1.27.2, from 1.26.5. Fixes 21 known vulnerabilities: GO-2026-5026 (CVE-2026-39821), GO-2026-5942 (CVE-2026-46600), GO-2026-5972 (CVE-2026-33818), GO-2026-6088 (CVE-2026-56859), GO-2026-6089 (CVE-2026-56853), GO-2026-6090 (CVE-2026-56862) and 15 more.

21 Go module updates wait for the screening judge and aren't in this MR yet.

Merge request reports