[arnaubennassar]

🔄 Changes Summary

• Bump Go from 1.26.9 to the latest stable release, 1.27.3 (per https://go.dev/dl).
• go.mod: go 1.26.0 -> 1.27.0 and toolchain go1.26.9 -> go1.27.3. go mod tidy produces no dependency changes.
• Dockerfile / Dockerfile.debug: builder image golang:1.27.3-alpine.
• CI pins aligned to 1.27.3: test-unit, lint, codeql, govulncheck, test-e2e, test-go-e2e, test-e2e-exit_cenrtificate_tool (govulncheck was still on 1.25.7).
• lint: golangci-lint v2.14.0 -> v2.15.0. v2.14.0 is built with Go 1.26 and refuses to lint a go1.27 module; v2.15.0 is built with Go 1.27.
• Fix two %w wraps of *GRPCError flagged by the new Go 1.27 printf vet check (GRPCError implements error on a value receiver, so wrapping the pointer defeats errors.Is):
  • grpc/client_test.go
  • aggsender/flows/builder_flow_aggchain_prover_test.go

⚠️ Breaking Changes

• 🛠️ Config: None
• 🔌 API/CLI: None
• 🗑️ Deprecated Features: None

📋 Config Updates

• 🧾 Diff/Config snippet: N/A

🔌 API Updates

🔌 Bridge service API

• 🔌 Bridge service API Update: No endpoints modified, added or removed. No breaking interface change.

🔌 Proxy API

• 🔌 AProxy API Update: No endpoints modified, added or removed. No breaking interface change.

🔌 Others API

• 🔌 Others API Update: No endpoints modified, added or removed. No breaking interface change.

✅ Testing

• 🤖 Automatic: CI runs unit, lint, govulncheck, codeql and e2e with 1.27.3. Locally verified with go1.27.3: go build ./..., go vet ./... and golangci-lint v2.15.0 are clean; full go test -short -race ./... passes except for three pre-existing flakes (see notes).
• 🖱️ Manual: N/A

🐞 Issues

• N/A

🔗 Related PRs

• chore: bump Go to 1.26.10 [release/0.10] #1916 / chore: bump Go to 1.26.10 [release/0.11] #1917 (Go bumps on the release/0.10 and release/0.11 branches, which moved to 1.26.10)

📝 Notes

• Two pre-existing, version-independent test flakes showed up during local runs and also reproduce on develop with go1.26.9, so they are not caused by this bump:
  • bridgeservicefinder/TestLiveDiscovery_AllowNetworkIDs — data race between the test reading f.addrToNetworkID and listener.discoverRollup writing it (added in feat: aggkit-proxy bridgeServiceFinder AllowNetworkIDs whitelist 1909 #1923). Reproduces ~1/5 runs on develop too.
  • claimsync/TestClaimCalldata — local geth docker container restart hiccup (connection reset by peer); passes on re-run.
  • l2gersync/TestL2GERSync_IndexLegacyGERManagerSC — timing dependent; passes on re-run.
• The bump is to 1.27.3 rather than 1.26.10 used on the release branches because 1.27.3 is the latest stable release.