SILO 20260214 Released

Embedded Console restoration, GitHub CI/CD, Go 1.26.0, and the first complete community delivery surface.
By Ruohang Feng |
Tags:

Published: 2026-02-14 · Version: RELEASE.2026-02-14T12-00-00Z

This early infrastructure-focused community release restores the embedded Console, introduces GitHub CI/CD, and lifts the Go baseline to 1.26.0, which also absorbs a batch of security fixes from the older toolchain generation.

Major Changes

  • Restore the embedded Console and refresh the README to clarify the community fork position.
  • Add GitHub CI/CD workflows as the base for automated builds and multi-platform delivery.
  • Add quick links for docs, Docker, the GitHub repository, and installation through the pig package manager.

Fixed CVEs

These issues were absorbed as part of the Go 1.25.5 -> 1.26.0 upgrade:

  • CVE-2025-68121: crypto/tls could incorrectly accept mutated CA configuration during session resumption.
  • CVE-2025-61730: TLS 1.3 could process handshake messages incorrectly across encryption-level boundaries.
  • CVE-2025-61726: net/url query parsing could be abused for memory exhaustion.
  • CVE-2025-61728: archive/zip could consume excessive CPU while building archive indexes.
  • CVE-2025-68119: cmd/go could trigger unexpected code execution when invoking external VCS tooling.
  • CVE-2025-61731: the #cgo pkg-config: directive could be abused for arbitrary file writes.
  • CVE-2025-61732: cmd/cgo comment parsing discrepancies could enable code smuggling.
  • 8630937: Restore embedded console and update README for community fork
  • 5d57938: add github ci/cd pipeline
Last modified August 2, 2026: init commit (8338d5b)