Skip to content

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5 (main) #3456

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
+1 −1
Open

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5 (main) #3456

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile.dist
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@

## Build

FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build
FROM registry.access.redhat.com/ubi9/go-toolset:1.26.5@sha256:0b471eb04868f3d9d90bf3c668f9c6c7a22cef07474ac9fec067909dfd7dec7c AS build

Check failure on line 19 in Dockerfile.dist

View workflow job for this annotation

GitHub Actions / Test 

Containerfile version incompatible, saw 1.26.5, running with version: 1.26.3

@fullsend-ai-review fullsend-ai-review Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which falls under the protected path Dockerfile. The PR has no linked issue providing authorization for modifying governance/infrastructure files. Human approval is required for all protected-path changes.

Suggested fix: Link an issue or provide explicit justification in the PR description for modifying infrastructure files, and obtain human reviewer approval.

@fullsend-ai-review fullsend-ai-review Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which matches the protected 'Dockerfile' path pattern. Protected paths (governance and infrastructure files) require human approval for all changes. The PR has no linked issue providing authorization for modifying this protected file. The change is a Renovate bot Docker base image tag update (go-toolset 1.26.3 → 1.26.5 with pinned digest), and renovate.json is configured in the repository, indicating this is an expected automated update. The change itself is mechanical and low-risk, but human approval is required for all protected-path modifications.

Suggested fix: A human maintainer should review and approve this Docker base image update. No code changes are needed — this finding flags the protected-path governance requirement.


ARG TARGETOS
ARG TARGETARCH
Expand Down
Loading