[pull] master from AdguardTeam:master

.github/workflows/build.yaml

@@ -1,6 +1,6 @@
 'env':
   'BASE_IMAGE': |-
-    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.7--1' }}
+    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.8--1' }}
   'BUILD_DIR': |-
     build
   'CLIENT_DIR': |-

.github/workflows/private.yaml

@@ -1,6 +1,6 @@
 'env':
   'BASE_IMAGE': |-
-    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.7--1' }}
+    ${{ vars.BASE_IMAGE || 'adguard/go-builder:1.26.8--1' }}
   'CACHE_BUSTER': |-
     ${{ inputs.cache_buster || '0' }}
   'CLIENT_DIR': |-

.github/workflows/workflow.yaml

@@ -1,6 +1,6 @@
 'env':
   'CLIENT_DIR': 'client'
-  'GO_VERSION': '1.26.7'
+  'GO_VERSION': '1.26.8'
   'NODE_VERSION': '24'
 'jobs':
   'ESLint':

CHANGELOG.md

@@ -18,15 +18,15 @@ See also the [v0.107.80 GitHub milestone][ms-v0.107.80].
 NOTE: Add new changes BELOW THIS COMMENT.
 -->
 
-<!--
-NOTE: Add new changes ABOVE THIS COMMENT.
--->
-
 ### Security
 
-- Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.7][go-1.26.7].
+- Go version has been updated to prevent the possibility of exploiting the Go vulnerabilities fixed in [1.26.8][go-1.26.8].
 
-[go-1.26.7]: https://groups.google.com/g/golang-announce/c/qA6Vpj2UA-4
+[go-1.26.8]: https://groups.google.com/g/golang-announce/c/QiTRm-HGGtI
+
+<!--
+NOTE: Add new changes ABOVE THIS COMMENT.
+-->
 
 ## [v0.107.79] - 2026-08-18
 

Makefile

@@ -25,7 +25,7 @@ DIST_DIR = dist
 GOAMD64 = v1
 GOPROXY = https://proxy.golang.org|direct
 GOTELEMETRY = off
-GOTOOLCHAIN = go1.26.7
+GOTOOLCHAIN = go1.26.8
 GPG_KEY = devteam@adguard.com
 GPG_KEY_PASSPHRASE = not-a-real-password
 NPM = npm

bamboo-specs/release.yaml

@@ -12,7 +12,7 @@
     'channel': 'edge'
     'clientDir': 'client_v2'
     'dockerFrontend': 'adguard/home-js-builder:4.0'
-    'dockerGo': 'adguard/go-builder:1.26.7--1'
+    'dockerGo': 'adguard/go-builder:1.26.8--1'
 
 'stages':
   - 'Build frontend':
@@ -297,7 +297,7 @@
             'channel': 'beta'
             'clientDir': 'client'
             'dockerFrontend': 'adguard/home-js-builder:4.0'
-            'dockerGo': 'adguard/go-builder:1.26.7--1'
+            'dockerGo': 'adguard/go-builder:1.26.8--1'
     # release-vX.Y.Z branches are the branches from which the actual final
     # release is built.
   - '^release-v[0-9]+\.[0-9]+\.[0-9]+':
@@ -314,4 +314,4 @@
             'channel': 'release'
             'clientDir': 'client'
             'dockerFrontend': 'adguard/home-js-builder:4.0'
-            'dockerGo': 'adguard/go-builder:1.26.7--1'
+            'dockerGo': 'adguard/go-builder:1.26.8--1'

docker/ci.Dockerfile

@@ -28,7 +28,7 @@
 #    needed.  Keep it in sync with bamboo-specs/bamboo.yaml.
 
 # NOTE:  Keep in sync with bamboo-specs/bamboo.yaml.
-ARG BASE_IMAGE=adguard/go-builder:1.26.7--1
+ARG BASE_IMAGE=adguard/go-builder:1.26.8--1
 
 # The dependencies stage is needed to install packages and tool dependencies.
 # This is also where binaries like osslsigncode, which may be required for tests

go.mod

@@ -1,6 +1,6 @@
 module github.com/AdguardTeam/AdGuardHome
 
-go 1.26.7
+go 1.26.8
 
 require (
 	github.com/AdguardTeam/dnscrypt v0.0.2

go.sum

@@ -6,8 +6,6 @@ cloud.google.com/go/compute/metadata v0.9.0 h1:pDUj4QMoPejqq20dK0Pg2N4yG9zIkYGdB
 cloud.google.com/go/compute/metadata v0.9.0/go.mod h1:E0bWwX5wTnLPedCKqk3pJmVgCBSM6qQI1yTBdEb3C10=
 github.com/AdguardTeam/dnscrypt v0.0.2 h1:kIFCyjYofKHug7RwPGOjVga81P0/zOQdbUN+7p+I95M=
 github.com/AdguardTeam/dnscrypt v0.0.2/go.mod h1:qCFs51rLfNzEDZqb6nz1tocVLnEearJ1zng6O3I6ecA=
-github.com/AdguardTeam/dnsproxy v0.84.0 h1:bcTORgQL0L5cwcTz9f+iB0JPZVbCHlCv7phso9y3lrU=
-github.com/AdguardTeam/dnsproxy v0.84.0/go.mod h1:nZlktYebWcLO613q1j2N0bZ5BEnHPuqXAyW6O9vIhDU=
 github.com/AdguardTeam/dnsproxy v0.84.1 h1:Ge1UdyVNswKn0BKrV5qp+o/V0tF0N6wYcxaGYujDeEg=
 github.com/AdguardTeam/dnsproxy v0.84.1/go.mod h1:nZlktYebWcLO613q1j2N0bZ5BEnHPuqXAyW6O9vIhDU=
 github.com/AdguardTeam/golibs v0.35.15 h1:KjksvvzlQqxdNvrz+O3FgMbZKZAQdcoCkgBz0mR7wFQ=