Agent Deck 1.16.28 rebuilds against patched Go dependencies
Agent Deck 1.16.28 rebuilds the terminal manager for Claude, Gemini, OpenCode and Codex with Go 1.26.9 and golang.org/x/net 0.60.0. The maintainer says this clears thirteen govulncheck advisories carried by 1.16.27, while noting that the cited HTTP/2 HPACK crash was not reachable because Agent Deck does not serve HTTP/2.
Why it matters: Agent supervisors sit beside credentials, prompts, repositories and long-lived sessions. Even when one listed flaw is not reachable, shipping binaries on patched runtime and network libraries narrows avoidable exposure in a tool that coordinates multiple…