chore(security): update Go toolchain to 1.26.6 and patch vulnerable dependencies

[ditahkk]

Summary by CodeRabbit

• New Features
  • Static NAT enablement now requires a network identifier and displays operation status and messages.
  • Volume attach and detach now display the volume slug, status, and operation message.
• Documentation
  • Updated command examples and development requirements to reflect the latest Go version and network requirement.
  • Added unreleased changelog notes covering behavior and security updates.
• Chores
  • Updated the Go toolchain and related dependencies across builds, tests, and smoke checks.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: bc562c31-f1e8-4e0f-bd21-d25fdf28c57a

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 0ba2f298-2652-4885-af91-a444f16c6c4f

📥 Commits

Reviewing files that changed from the base of the PR and between 49ae398 and 41adcef.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (14)

• .github/workflows/build.yml
• .github/workflows/smoke.yml
• CHANGELOG.md
• README.md
• docs/commands.md
• docs/development.md
• go.mod
• internal/commands/ip.go
• internal/commands/volume.go
• pkg/api/ipaddress/ipaddress.go
• pkg/api/ipaddress/ipaddress_test.go
• pkg/api/volume/volume.go
• pkg/api/volume/volume_test.go
• tests/smoke/cases.sh

Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review.

---

📝 Walkthrough

Walkthrough

The CLI now requires a network for static NAT enablement and displays operation status and messages. Volume attach and detach use action responses. Go 1.26.6 and updated dependencies are applied across code, workflows, and documentation.

Changes

CLI API and toolchain updates

Layer / File(s)	Summary
Toolchain and release documentation .github/workflows/*, go.mod, README.md, docs/development.md, CHANGELOG.md	Go 1.26.6 and updated dependencies are applied to the module and workflows. Documentation and the unreleased changelog reflect the updated versions and command behavior.
Static NAT network and response flow pkg/api/ipaddress/ipaddress.go, pkg/api/ipaddress/ipaddress_test.go, internal/commands/ip.go, docs/commands.md	Static NAT requests include a network slug. The service returns StaticNATResponse. The command displays status and message fields. Tests validate the response and request network.
Volume attach and detach action responses pkg/api/volume/volume.go, pkg/api/volume/volume_test.go, internal/commands/volume.go, tests/smoke/cases.sh	Attach and detach return ActionResponse values. Commands display the volume slug, status, and message. The smoke test passes the VM through --vm.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Merge Risk: ⚪ Minimal · up to 41adc

The dependency and toolchain updates introduce no actionable merge-blocking risk based on the supplied evidence; the PR is merge-ready after normal checks and review.

Sequence Diagram(s)

sequenceDiagram
  participant CLI as runIPStaticNATEnable
  participant Service as ipaddress.Service
  participant API as Static NAT API
  CLI->>Service: EnableStaticNAT(ipSlug, vmSlug, networkSlug)
  Service->>API: POST request with network
  API-->>Service: StaticNATResponse
  Service-->>CLI: Display status and message

Loading

Suggested reviewers: ditahm6, godsonten, clintonche

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 0.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 9 functions across 7 files. (7 skipped: 7 unsupported.)	Write docstrings for the functions missing them to satisfy the coverage threshold.

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the primary security and Go toolchain updates in the changeset.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches 💡 1

📝 Generate docstrings 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch issues/sec-update

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}