Update docker.io/library/golang Docker tag to v1.26.5 (main) by renovate[bot] · Pull Request #3366 · conforma/cli

renovate · 2026-06-27T01:14:44Z

This PR contains the following updates:

Package	Type	Update	Change
docker.io/library/golang	stage	patch	`1.26.3` → `1.26.5`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM (* 0-3 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

fullsend-ai-review · 2026-06-27T01:17:49Z

🤖 Finished Review · ✅ Success · Started 1:17 AM UTC · Completed 1:23 AM UTC
Commit: 47d3320 · View workflow run →

fullsend-ai-review · 2026-06-27T01:23:20Z

Review

Verdict: Approve

PR: #3366 — Update docker.io/library/golang Docker tag to v1.26.5 (main)

Summary

This is a Renovate bot patch-version bump of the Go Docker base image in Dockerfile from 1.26.3 to 1.26.5, with an updated digest pin. The change is mechanical, minimal (1 file, 1 line), and follows established patterns.

Dimension Results

Dimension	Result
Correctness	✅ No logic issues. Syntax is correct, `image:tag@sha256:digest` pattern preserved. Minor version consistency note (see below).
Security	✅ No security concerns. Digest pinning is maintained, preventing tag-mutation supply chain attacks. No secrets, permissions, or auth changes.
Intent & Coherence	✅ Mechanical dependency update by Renovate bot. Authorization implicit from automated nature.
Style & Conventions	✅ No style issues. The change follows the existing `FROM image:tag@sha256:digest AS stage` pattern exactly.
Documentation Currency	✅ No documentation references the specific Go version `1.26.3`; no staleness introduced.
Cross-Repo Contracts	✅ No exported interfaces, APIs, or schemas modified.

Findings

[low] version-consistency — Dockerfile:19
The Dockerfile is updated to Go 1.26.5 while go.mod, .tool-versions, Dockerfile.dist, and other module files still specify Go 1.26.3. Go patch versions are fully backward compatible, so this causes no build or runtime issues. This is expected behavior for scoped Renovate updates — separate PRs or rules will update the other files. If the repo's golang-version-check CI step enforces strict alignment, it may flag this mismatch.

Previous run

Review — ✅ Approve

PR: #3366 — Update docker.io/library/golang Docker tag to v1.26.5 (main)
Author: renovate[bot]
Scope: Dockerfile (1 file, 1 line changed)

Summary

Routine Renovate bot patch version bump of the Go builder base image from 1.26.3 to 1.26.5. The change is mechanical and value-only:

Digest pinning preserved — the FROM directive uses tag@sha256:digest format, ensuring reproducible builds.
Patch compatibility confirmed — Go's forward-compatibility guarantees mean go.mod files specifying go 1.26.3 build correctly under 1.26.5.
No behavioral changes — no new CLI flags, API surfaces, config keys, or architectural changes.
No documentation impact — no docs reference the specific Go builder version.
No security concerns — no secrets, permissions, or injection surfaces affected.

Dimensions reviewed

Dimension	Result
Correctness	✅ No issues
Security	✅ No issues
Intent & coherence	✅ Mechanical change, authorization implicit
Style & conventions	✅ Follows existing patterns
Documentation currency	✅ No staleness
Cross-repo contracts	⏭ Skipped (no API surface changes)

No findings above the severity threshold.

Previous run (2)

Review of #3366 — Update docker.io/library/golang Docker tag to v1.26.5

Verdict: ✅ Approve

Summary

Mechanical Renovate patch-version bump of the Go build image from 1.26.3 → 1.26.5 in Dockerfile. Single-line change, no behavioral or API impact.

Dimensions reviewed

Dimension	Result
Correctness	✅ No issues — patch bump within same minor; `go.mod` `go 1.26.3` directive is compatible with Go 1.26.5 toolchain
Security	✅ No issues — no secrets, permissions, injection vectors, or hidden content
Intent & coherence	✅ Mechanical dependency update by Renovate bot; authorization implicit
Style & conventions	✅ Early exit — value follows existing pattern (`docker.io/library/golang:<semver>`)
Documentation currency	✅ No documentation references to the Go Docker image version
Cross-repo contracts	⏭ Skipped — no exported API changes

Notes

Dockerfile.dist uses ubi9/go-toolset:1.26.3 (different base image, managed separately by Renovate).
go.mod, tools/go.mod, tools/kubectl/go.mod, and acceptance/go.mod all declare go 1.26.3 — this is the Go language version directive, not the build toolchain version, and is compatible with building under Go 1.26.5.
.tool-versions lists golang 1.26.3 for local development — managed independently.
Auto-merge is enabled for this PR.

Previous run (3)

Review

Outcome: Approve

Summary

Routine Renovate patch bump of the Go build image from docker.io/library/golang:1.26.3 to 1.26.5 in Dockerfile line 19. The change is a single-line tag update in the build stage — no runtime image, application code, or configuration is affected.

Analysis

Dimension	Result
Correctness	✅ Clean tag bump. Go patch releases are backward compatible. The `go.mod` directive (`go 1.26.3`) is respected by the Go toolchain regardless of the container image version.
Security	✅ Patch updates typically include bug and security fixes — this is a net positive.
Intent & coherence	✅ Standard automated dependency update, appropriately scoped to a single image reference.
Style & conventions	✅ Consistent with existing Dockerfile patterns.
Documentation	✅ No documentation changes needed.
Cross-repo contracts	✅ No API, schema, or interface changes.

Notes

Dockerfile.dist uses a different base image (registry.access.redhat.com/ubi9/go-toolset:1.26.3) managed by a separate Renovate rule. The version skew between the two Dockerfiles is expected and handled independently.
No findings requiring action.

Previous run (4)

Review — ✅ Approve

Verdict: This is a safe, well-scoped automated patch version bump with no concerns.

Change summary

This Renovate-generated PR bumps the Go Docker build image from golang:1.26.3 to golang:1.26.5 in the main Dockerfile. The change is a single-line patch version update in the FROM directive for the build stage.

Analysis

Correctness — The Docker image tag format is valid. Patch version bumps within Go's release cycle are backward-compatible by policy. The build stage continues to use the same multi-stage pattern (AS build), and no downstream COPY --from=build instructions are affected by the version change.

Security — Updating to a newer Go patch release is security-positive; Go patch versions routinely include fixes for CVEs and standard library vulnerabilities. No new attack surface is introduced.

Scope & intent — The PR is correctly scoped to the docker.io/library/golang image in Dockerfile only. Other Go version references (go.mod, .tool-versions, Dockerfile.dist with ubi9/go-toolset) are separate datasources and are not expected to update in this PR.

Documentation — No documentation changes needed for a Docker base image version bump.

Cross-repo contracts — No API, schema, or interface changes.

No findings

No issues identified. The change is low-risk and appropriate for automerge.

Previous run (5)

Review

Verdict: Approve ✅

This is a mechanical Renovate patch version bump of the Go Docker build image from 1.26.3 → 1.26.5 in the Dockerfile. The change is a single-line, value-only update with no behavioral, security, or correctness concerns.

Dimensions reviewed

Dimension	Findings
Correctness	None — patch-level bump is backward compatible; Go 1.26.5 builds modules declaring `go 1.26.3` without issue
Security	None — no secrets, no injection patterns, no permission changes
Intent & coherence	Mechanical change; authorization implicit from Renovate bot automation
Style & conventions	Skipped — value-only change follows existing pattern
Documentation currency	`.tool-versions` still references `golang 1.26.3` (see below)
Cross-repo contracts	Skipped — no API surface changes

Notes

.tool-versions version skew (low): The .tool-versions file still specifies golang 1.26.3 while the Dockerfile now uses 1.26.5. This is expected behavior with Renovate — Docker image tags and asdf/mise tool versions are typically updated in separate PRs via different data sources. No functional impact on builds or local development (Go patch versions are backward compatible). Consider updating .tool-versions in a follow-up if the repo's Renovate config doesn't handle it automatically.

_{Reviewed with ✨ at commit 293d928}

Previous run (6)

Review — Approve ✅

PR: Update docker.io/library/golang Docker tag from 1.26.3 → 1.26.5 (patch)
Scope: 1 file (Dockerfile), 1 line changed

Summary

This is an automated Renovate patch-version bump of the Go compiler Docker image used in the build stage. The change is safe and straightforward.

Verified:

The bump is a patch release (1.26.3 → 1.26.5), which includes only bug and security fixes — no breaking changes.
The change affects only the build stage (FROM ... AS build). The runtime base image (ubi9/ubi-minimal) is unchanged.
go.mod specifies go 1.26.3 as the minimum version, which is fully forward-compatible with Go 1.26.5.
Dockerfile.dist (Red Hat downstream variant) uses a separate base image (ubi9/go-toolset:1.26.3) and is not in scope for this PR — it is managed by a different Renovate rule or update cadence.
No code, test, or documentation changes are required for a build-image patch bump.

No findings.

Previous run (7)

Review — Approve ✅

PR: #3366 — Update docker.io/library/golang Docker tag to v1.26.5 (main)
Author: renovate[bot]
Scope: 1 file changed (Dockerfile), 1 addition, 1 deletion

Summary

Patch-level bump of the Go build-stage base image from golang:1.26.3 to golang:1.26.5 in the Dockerfile. This is a mechanical, Renovate-managed dependency update.

Review dimensions

Dimension	Result
Correctness	✅ No issues — tag bump only, no logic or test changes
Security	✅ No issues — no secrets, permissions, or attack surface changes
Intent & coherence	✅ Mechanical change, authorization implicit
Style & conventions	✅ Value follows existing `image:tag` pattern
Documentation currency	✅ No stale docs — `.tool-versions` and `go.mod` managed separately by Renovate
Cross-repo contracts	⏭ Skipped — no exported interfaces modified

Notes

The go.mod directive (go 1.26.3) and .tool-versions (golang 1.26.3) remain at 1.26.3. This is expected — Renovate manages each dependency source independently, and the go directive in go.mod specifies a minimum version, not a pinned version. Building with Go 1.26.5 against go 1.26.3 is standard behavior.
The final-stage base image (ubi9/ubi-minimal) is properly digest-pinned. The build-stage image uses a mutable tag, which is pre-existing behavior not introduced by this PR.

Previous run (8)

Review of #3366 — Update docker.io/library/golang Docker tag to v1.26.5

Verdict: ✅ Approve

Summary

This is a safe, mechanical Renovate patch version bump of the Go Docker build image from golang:1.26.3 to golang:1.26.5 in the Dockerfile. The change is a single-line tag update with no behavioral, security, or architectural impact.

Analysis

Dimension	Result
Correctness	✅ No issues. Go patch releases are backward-compatible. The `go 1.26.3` directive in `go.mod` specifies a minimum version — Go 1.26.5 satisfies it.
Security	✅ No issues introduced. No secrets, injection patterns, or permission changes.
Intent & Coherence	✅ Automated Renovate update — authorization implicit from mechanical nature.
Style & Conventions	✅ Tag format matches existing codebase pattern.
Documentation	✅ No documentation references the specific Docker Go patch version.
Cross-repo Contracts	⏭ Skipped — no exported interfaces modified.

Notes

The version skew between Dockerfile (1.26.5 after merge) and go.mod / .tool-versions / Dockerfile.dist (all still at 1.26.3) is expected and benign. These are managed by separate update mechanisms, and Go's compatibility contract ensures patch versions are interchangeable.

Previous run (9)

Review

Outcome: Approve ✅

Summary

This is an automated Renovate PR that bumps the Go build image from docker.io/library/golang:1.26.3 to docker.io/library/golang:1.26.5 in the Dockerfile. The change is a single-line patch version update to the build-stage base image.

Analysis

Dimension	Result
Correctness	✅ Valid `FROM` statement; build stage alias preserved; all `COPY --from=build` references unaffected
Security	✅ Patch version bump likely includes security fixes — net-positive change
Intent & coherence	✅ Standard Renovate dependency update, appropriately scoped to one file
Style & conventions	✅ Consistent with existing Dockerfile patterns
Documentation	✅ No documentation impact
Cross-repo contracts	✅ No API or schema changes

Notes

The Dockerfile.dist uses a separate Red Hat Go toolset image (ubi9/go-toolset:1.26.3) which is managed independently — no action needed here.
Auto-merge is enabled for this PR.
No findings at or above the reporting threshold.

Previous run (10)

Review of #3366 — Update docker.io/library/golang Docker tag to v1.26.5

Verdict: ✅ Approve

This is a mechanical patch version bump of the Go build image in the Dockerfile from golang:1.26.3 to golang:1.26.5, generated by Renovate bot. The change is a single-line value-only substitution.

Dimensions reviewed

Dimension	Result
Correctness	✅ No issues — patch version bump is backward-compatible; Go 1.26.5 will respect the `go 1.26.3` directive in go.mod
Security	✅ No issues — no auth, secrets, permissions, or injection surfaces affected
Intent & coherence	✅ Mechanical change; authorization implicit from Renovate automation
Style & conventions	✅ Tag format matches existing Dockerfile conventions
Documentation currency	✅ No documentation references the specific Go version
Cross-repo contracts	⏭ Skipped — no exported interfaces modified

No findings above the reporting threshold.

Previous run (11)

Review

Verdict: Approve ✅

Summary

This is a Renovate-managed patch version bump of the Go builder image from golang:1.26.3 to golang:1.26.5 in the Dockerfile's build stage. The change is a single-line tag update with no functional, security, or compatibility concerns.

Analysis

Correctness: The only change is the Go Docker tag in the FROM directive of the build stage. Patch version bumps within the same minor release are backward compatible. The go.mod directive (go 1.26.3) specifies a minimum version and is satisfied by building with Go 1.26.5.
Security: Patch releases typically include bug fixes and security patches — this is a net security improvement.
Scope: Properly scoped to a single version bump in one file. The Go image is only used in the multi-stage build's compilation stage; the final runtime image (ubi9/ubi-minimal) is unaffected.
Build impact: No changes to build logic, arguments, or final image composition.

No findings.

Previous run (12)

Review of #3366 — Update docker.io/library/golang Docker tag to v1.26.5

Verdict: ✅ Approve

Summary

Mechanical patch version bump of the Go build image from 1.26.3 to 1.26.5 in Dockerfile, generated by Renovate. The change is a single-line value substitution with no logic, security, or architectural impact. Patch releases are backward-compatible by Go's release policy.

Findings

Severity	Category	File	Description
low	version-consistency	`.tool-versions`	`.tool-versions` specifies `golang 1.26.3` while the Dockerfile is being bumped to `1.26.5`. This creates minor version drift between local development tooling (asdf/mise) and CI Docker builds. Consider updating `.tool-versions` in this or a follow-up PR.

Dimensions reviewed

Correctness: No logic changes. Version consistency note above.
Security: No secrets, injection patterns, or permission changes.
Intent & coherence: Authorization implicit from mechanical nature of change.
Style & conventions: Value follows established FROM pattern.
Documentation currency: No documentation impact.
Cross-repo contracts: No exported API changes.

Previous run (13)

Review of #3366

LGTM ✅

Change: Bumps the Go build image from golang:1.26.3 to golang:1.26.5 (patch release) in the Dockerfile.

Assessment

This is a mechanical Renovate patch version bump of the Go Docker build image. Reviewed across correctness, security, intent, style, and documentation dimensions.

Correctness: The go directive in go.mod (1.26.3) specifies a minimum version. Go 1.26.5 is fully backward-compatible and will build the module without issue. Renovate typically handles go.mod and .tool-versions updates in separate PRs.
Security: No auth, permissions, secrets, or injection concerns. The mutable tag pattern (golang:1.26.5 vs digest-pinned) is pre-existing and not introduced by this PR.
Intent: Mechanical dependency update by Renovate bot — authorization is implicit from the automated nature of the change.
Style: The version tag format is consistent with the existing Dockerfile pattern.
Documentation: No public-facing docs reference specific Go build image versions.

No blocking findings. Safe to merge.

Previous run (14)

Review — Approve ✅

PR: #3366 — Update docker.io/library/golang Docker tag to v1.26.4 (main)
Author: renovate[bot] | Files changed: 1 | Lines: +1/−1

Summary

Routine Renovate patch-version bump of the Go build image (docker.io/library/golang) from 1.26.3 → 1.26.4 in the Dockerfile. The change is a single-line, value-only modification to the build-stage base image tag.

Reviewed across correctness, security, intent/coherence, style, documentation currency, and cross-repo contracts. No blocking findings.

Observations (low severity — non-blocking)

Version skew with go.mod files: The four go.mod files (go.mod, acceptance/go.mod, tools/go.mod, tools/kubectl/go.mod) and .tool-versions still specify Go 1.26.3. This is expected Renovate behavior — it manages Docker image tags and go directives as separate dependency updates. The Go toolchain is backward-compatible at the patch level, so building inside a 1.26.4 container with go 1.26.3 in go.mod is valid. CI workflows use go-version-file: go.mod and will continue using 1.26.3 until the go.mod is updated separately.
Dockerfile.dist uses separate image source: Dockerfile.dist references registry.access.redhat.com/ubi9/go-toolset:1.26.3 (pinned by digest). This is a different image registry managed on a separate Renovate cadence — no inconsistency.

Dimensions reviewed

Dimension	Result
Correctness	✅ No logic issues. Tag format consistent.
Security	✅ No secrets, injection vectors, or permission changes.
Intent & coherence	✅ Mechanical change, authorization implicit.
Style & conventions	✅ Value follows existing pattern.
Documentation currency	✅ No docs reference Go 1.26.3.
Cross-repo contracts	⏭ Skipped — no exported APIs modified.

Previous run (15)

Review — approve

Summary

Automated Renovate patch-level bump of the Go build image in Dockerfile: docker.io/library/golang:1.26.3 → 1.26.4.

The change is a single-line modification to the multi-stage build's FROM directive. No application code, configuration, tests, or documentation are affected.

Analysis

Dimension	Assessment
Correctness	✅ Trivially correct — only the Docker image tag changes. The build stage, arguments, and all subsequent steps are unchanged.
Security	✅ Positive — patch releases typically include security and bug fixes. Staying current with Go patch versions is good practice.
Intent & coherence	✅ Standard automated dependency update, appropriately scoped to a single file. Consistent with the project's Renovate configuration.
Style/conventions	✅ Follows the existing `docker.io/library/golang:<version>` convention without digest pinning (matching the project's current approach).
Documentation	✅ No documentation impact.
Cross-repo contracts	✅ No API, schema, or interface changes.

Go version note: The go.mod directive remains at go 1.26.3. This is fine — the Go toolchain respects the go.mod language version, and building with a newer patch-level image is standard practice. Renovate manages go.mod and Dockerfile updates independently.

Findings

No findings at or above the reporting threshold.

Previous run (16)

Review

Outcome: Approve

Summary

Automated Renovate patch-version bump of the Go build image from golang:1.26.3 to golang:1.26.4 in the Dockerfile's build stage. This is a single-line change with no impact on application logic, APIs, or runtime behavior.

Analysis

Dimension	Finding
Correctness	✅ Patch version bump is backward-compatible with the `go 1.26.3` directive in `go.mod`. No behavioral changes.
Security	✅ Patch releases typically include bug fixes and security patches — updating is beneficial.
Intent & scope	✅ Properly scoped automated dependency update; single file, single line.
Style	✅ No style changes.
Documentation	✅ No documentation impact.
Cross-repo contracts	✅ No API or schema changes.

No findings.

Labels: PR updates Go toolchain version in Docker build stage

Previous run (17)

Review

Findings

High

[protected-path] Dockerfile:19 — Dockerfile is a protected infrastructure file requiring human approval. This PR modifies it but has no linked issue providing explicit authorization for the change. While the PR is authored by renovate[bot] and renovate.json is configured for this repository (indicating this is an expected automated dependency update of golang from 1.26.3 to 1.26.4), protected-path changes always require human review and approval regardless of automation source.
Remediation: A human maintainer must review and approve this Dockerfile change.

Previous run (18)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is a protected governance/infrastructure file requiring human approval. The PR has no linked issue providing authorization for this change. While the change is a mechanical Renovate patch version bump (golang 1.26.3 → 1.26.4), protected-path changes require explicit justification via a linked issue regardless of scope.
Remediation: Ensure a human reviewer with appropriate permissions approves this protected-path change. For future automated dependency updates to protected files, consider linking a standing issue or policy that authorizes routine patch bumps.

Previous run (19)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is a protected path requiring human approval. The PR has no linked issue providing authorization for this change. While the Renovate bot description explains the version bump (golang 1.26.3 → 1.26.4) and the change itself is a routine patch update with no correctness or security concerns, protected-path changes without a linked issue require explicit human approval for traceability.
Remediation: A maintainer should explicitly approve this protected-path change, or link an authorizing issue to the PR.

Labels: PR modifies the Dockerfile for a Docker base image version bump.

fullsend-ai-review · 2026-07-01T14:39:41Z

🤖 Finished Review · ✅ Success · Started 2:39 PM UTC · Completed 2:45 PM UTC
Commit: 47d3320 · View workflow run →

fullsend-ai-review · 2026-07-01T19:53:23Z

🤖 Finished Review · ✅ Success · Started 7:53 PM UTC · Completed 7:59 PM UTC
Commit: 47d3320 · View workflow run →

fullsend-ai-review · 2026-07-06T09:43:28Z

🤖 Finished Review · ✅ Success · Started 9:43 AM UTC · Completed 9:45 AM UTC
Commit: 47d3320 · View workflow run →

Superseded by updated review

fullsend-ai-review · 2026-07-06T13:02:07Z

🤖 Finished Review · ✅ Success · Started 1:02 PM UTC · Completed 1:04 PM UTC
Commit: 47d3320 · View workflow run →

fullsend-ai-review · 2026-07-07T20:46:49Z

🤖 Finished Review · ✅ Success · Started 8:46 PM UTC · Completed 8:51 PM UTC
Commit: 7c8ccca · View workflow run →

fullsend-ai-review · 2026-07-14T13:05:09Z

🤖 Finished Review · ✅ Success · Started 1:05 PM UTC · Completed 1:08 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-14T19:57:19Z

🤖 Finished Review · ✅ Success · Started 7:57 PM UTC · Completed 8:02 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-16T08:40:56Z

🤖 Finished Review · ✅ Success · Started 8:40 AM UTC · Completed 8:44 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-17T00:04:35Z

🤖 Finished Review · ✅ Success · Started 12:04 AM UTC · Completed 12:07 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-18T20:49:25Z

🤖 Finished Review · ✅ Success · Started 8:49 PM UTC · Completed 8:53 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-20T09:57:35Z

🤖 Finished Review · ✅ Success · Started 9:57 AM UTC · Completed 10:02 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-07-20T12:16:11Z

🤖 Finished Review · ✅ Success · Started 12:16 PM UTC · Completed 12:21 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review

See the review comment for full details.

fullsend-ai-review · 2026-07-20T12:21:36Z

 ## Build

-FROM docker.io/library/golang:1.26.3@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS build
+FROM docker.io/library/golang:1.26.5@sha256:3aff6657219a4d9c14e27fb1d8976c49c29fddb70ba835014f477e1c70636647 AS build


[low] version-consistency

The Dockerfile is updated to Go 1.26.5 while go.mod, .tool-versions, Dockerfile.dist, and other module files still specify Go 1.26.3. Go patch versions are fully backward compatible, so this causes no build or runtime issues. This is expected behavior for scoped Renovate updates — separate PRs or rules will update the other files. If the repo golang-version-check CI step enforces strict alignment, it may flag this mismatch.

Suggested fix: No action required on this PR. Verify that separate Renovate rules or manual processes will update go.mod, .tool-versions, and Dockerfile.dist to 1.26.5 as well.

renovate Bot added main renovate labels Jun 27, 2026

renovate Bot enabled auto-merge June 27, 2026 01:14

github-actions Bot added the size: XS label Jun 27, 2026

This comment was marked as outdated.

Sign in to view

fullsend-ai-review Bot added the docker Pull requests that update Docker code label Jun 27, 2026

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from b6a3e87 to 10c8488 Compare July 1, 2026 14:36

This comment was marked as outdated.

Sign in to view

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from 10c8488 to f6f0f7d Compare July 1, 2026 19:50

This comment was marked as outdated.

Sign in to view

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from f6f0f7d to 0ac51f8 Compare July 6, 2026 09:40

fullsend-ai-review Bot added requires-manual-review Review requires human judgment go Pull requests that update Go code labels Jul 6, 2026

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from 0ac51f8 to 3d9a76e Compare July 6, 2026 12:58

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 6, 2026

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from 3d9a76e to 43b050b Compare July 7, 2026 20:46

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 7, 2026

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from 98b851f to 2085433 Compare July 14, 2026 13:04

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 14, 2026

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from 2085433 to 293d928 Compare July 14, 2026 19:56

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 14, 2026

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from 293d928 to 7bf96a6 Compare July 16, 2026 08:40

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 16, 2026

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from 7bf96a6 to 1bd4548 Compare July 17, 2026 00:03

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 17, 2026

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from 1bd4548 to c91419d Compare July 18, 2026 20:48

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 18, 2026

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from c91419d to ebb0ade Compare July 20, 2026 09:56

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 20, 2026

Update docker.io/library/golang Docker tag to v1.26.5

516a519

renovate Bot force-pushed the renovate/main-docker.io-library-golang-1.26.x branch from ebb0ade to 516a519 Compare July 20, 2026 12:15

fullsend-ai-review Bot reviewed Jul 20, 2026

View reviewed changes

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 20, 2026

Uh oh!

Conversation

renovate Bot commented Jun 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Configuration

Uh oh!

fullsend-ai-review Bot commented Jun 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

fullsend-ai-review Bot commented Jun 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review

Summary

Dimension Results

Findings

Review — ✅ Approve

Summary

Dimensions reviewed

Review of #3366 — Update docker.io/library/golang Docker tag to v1.26.5

Summary

Dimensions reviewed

Notes

Review

Summary

Analysis

Notes

Review — ✅ Approve

Change summary

Analysis

No findings

Review

Dimensions reviewed

Notes

Review — Approve ✅

Summary

Review — Approve ✅

Summary

Review dimensions

Notes

Review of #3366 — Update docker.io/library/golang Docker tag to v1.26.5

Summary

Analysis

Notes

Review

Summary

Analysis

Notes

Review of #3366 — Update docker.io/library/golang Docker tag to v1.26.5

Dimensions reviewed

Review

Summary

Analysis

Review of #3366 — Update docker.io/library/golang Docker tag to v1.26.5

Summary

Findings

Dimensions reviewed

Review of #3366

Assessment

Review — Approve ✅

Summary

Observations (low severity — non-blocking)

Dimensions reviewed

Review — approve

Summary

Analysis

Findings

Review

Summary

Analysis

Review

Findings

High

Review

Findings

High

Review

Findings

High

Uh oh!

This comment was marked as outdated.

renovate Bot commented Jun 27, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jun 27, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jun 27, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 1, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 1, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 6, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 6, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 7, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 14, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 14, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 16, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 17, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 18, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 20, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jul 20, 2026 •

edited

Loading