chore: upgrade Go from 1.25.7 to 1.26.5

Go 1.26.5 released Jul 7, 2026. Includes security fix for GO-2026-5856 (crypto/tls ECH leak). Updates: CI runner (4x setup-go), go.mod, README, obsidian docs.

Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>

.gitea/workflows/ci.yaml

@@ -24,7 +24,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.25"
+          go-version: "1.26.5"
           cache: false
 
       - name: Cache Go modules
@@ -87,7 +87,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.25"
+          go-version: "1.26.5"
           cache: false
 
       - name: Cache Go modules
@@ -154,7 +154,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.25"
+          go-version: "1.26.5"
           cache: false
 
       - name: Cache Go modules
@@ -201,7 +201,7 @@ jobs:
 
       - uses: actions/setup-go@v5
         with:
-          go-version: "1.25"
+          go-version: "1.26.5"
           cache: false
 
       - name: Cache Go modules

README.md

@@ -1,6 +1,6 @@
 # Crussell
 
-Nail salon booking platform — Go 1.25 backend + SvelteKit 5 SPA + PostgreSQL 17 + Docker. Built for a UK sole-trader nail artist. UK-only (Cloudflare geo-block), UK phone format. All timestamps UTC-normalised — the backend's `clock.Now()` returns UTC, the DB connection uses `timezone = "UTC"`, and the frontend converts between UTC and wall-clock time client-side. Single-employee business.
+Nail salon booking platform — Go 1.26.5 backend + SvelteKit 5 SPA + PostgreSQL 17 + Docker. Built for a UK sole-trader nail artist. UK-only (Cloudflare geo-block), UK phone format. All timestamps UTC-normalised — the backend's `clock.Now()` returns UTC, the DB connection uses `timezone = "UTC"`, and the frontend converts between UTC and wall-clock time client-side. Single-employee business.
 
 ## Features
 

backend/go.mod

@@ -1,6 +1,6 @@
 module crussell
 
-go 1.25.7
+go 1.26.5
 
 require (
 	github.com/aws/aws-sdk-go-v2 v1.42.0

obsidian/Crussell/Overview.md

@@ -1,6 +1,6 @@
 # Crussell — Overview
 
-Full-stack booking platform for a UK sole-trader nail artist. Go 1.25 backend, SvelteKit 5 SPA frontend, PostgreSQL 17, Docker Compose. UK-only (Cloudflare geo-blocks non-UK). All timestamps UTC-normalised — the backend's `clock.Now()` returns `time.Now().UTC()`, the DB connection uses `timezone = "UTC"`, and the frontend converts between UTC and the browser's local wall-clock time via `formatLocalDateTime()` / `parseWallClockDate()`. No timezone conversion ambiguity — times shown are always UK wall-clock times.
+Full-stack booking platform for a UK sole-trader nail artist. Go 1.26.5 backend, SvelteKit 5 SPA frontend, PostgreSQL 17, Docker Compose. UK-only (Cloudflare geo-blocks non-UK). All timestamps UTC-normalised — the backend's `clock.Now()` returns `time.Now().UTC()`, the DB connection uses `timezone = "UTC"`, and the frontend converts between UTC and the browser's local wall-clock time via `formatLocalDateTime()` / `parseWallClockDate()`. No timezone conversion ambiguity — times shown are always UK wall-clock times.
 
 ---
 
@@ -136,7 +136,7 @@ Campaign lifecycle: `draft → active → completed` (or any → `cancelled`, `a
 | Tool | Version | Notes |
 |------|---------|-------|
 | Docker & Docker Compose | >= 20.10 | Compose V2 (`docker compose`, not `docker-compose`) |
-| Go | >= 1.22 | Tested with 1.25 |
+| Go | >= 1.22 | Tested with 1.26.5 |
 | Node | >= 18 | For frontend build |
 | tmux | >= 3.0 | For local-dev-2.sh dev helper |
 | psql | Any | Optional — for direct DB inspection during dev |