ghtkn 0.4.2

What's new in 0.4.2

⚠️ Security
704 Update Go to v1.27.3
This release is built with Go 1.27.3, which fixes CVE-2026-111943 in crypto/x509. Go now refuses trust in a small set of intermediate certificates of a specific Certificate Authority, after its CA keys were reported compromised. Verify filters out chains containing those intermediates. The Go team highly recommends upgrading immediately.
ghtkn talks to GitHub over TLS and relies on crypto/x509 to verify the server certificate, and that connection carries your access tokens and refresh tokens. We recommend upgrading.
ref.
- https://go.dev/doc/devel/release#go1.27.3
- https://thehackernews.com/2026/10/eight-emudhra-ca-keys-compromised.html
This release also includes Go 1.27.2 (#681), which has security fixes to the go command and the crypto/tls, html/template, net/http, net/textproto, and os packages.
- https://go.dev/doc/devel/release#go1.27.2

Documentation
703 Compare ghtkn with GitHub CLI's expiring tokens

CI
683 Update GitHub Actions runner to ubuntu-26.04
684 Share Go modules between integration test and go-test-full-workflow
689 Use go-autofix-action's reusable workflow
694 Replace go-test-full-workflow with go-test-workflow and test-workflow

Dependency updates
681 #704 Update Go to v1.27.3
661 #662 Update golang.design/x/clipboard to v0.11.0
698 Update golang.org/x/crypto to v0.58.0
679 Update golang.org/x/sys to v0.49.0
699 Update golang.org/x/term to v0.47.0
696 Update suzuki-shunsuke/download-go-module-action action to v0.0.8
701 Update suzuki-shunsuke/go-release-workflow action to v10.1.1
697 Update suzuki-shunsuke/go-test-workflow action to v3.2.3

Full release notes »