Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5 (main) by renovate[bot] · Pull Request #3456 · conforma/cli

renovate · 2026-08-04T01:40:12Z

This PR contains the following updates:

Package	Type	Update	Change
registry.access.redhat.com/ubi9/go-toolset	stage	patch	`1.26.3` → `1.26.5`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM (* 0-3 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

fullsend-ai-review · 2026-08-04T01:41:00Z

🤖 Finished Review · ✅ Success · Started 1:40 AM UTC · Completed 1:49 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-04T01:49:52Z

Review

Findings

High

[protected-path] Dockerfile.dist:19 — This PR modifies Dockerfile.dist, which matches the protected Dockerfile path pattern. Protected paths (governance and infrastructure files) require human approval for all changes. The PR has no linked issue providing authorization for modifying this protected file. The change is a Renovate bot Docker base image tag update (go-toolset 1.26.3 → 1.26.5 with pinned digest sha256:0b471eb...), and renovate.json is configured in the repository, indicating this is an expected automated update. The change itself is mechanical and low-risk — only the tag version and pinned digest hash are updated — but human approval is required for all protected-path modifications regardless of risk level.
Remediation: A human maintainer should review and approve this Docker base image update. No code changes are needed — this finding flags the protected-path governance requirement.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run

Review

Findings

High

[protected-path] Dockerfile.dist — This PR modifies Dockerfile.dist, which falls under the protected path Dockerfile. The PR has no linked issue providing authorization for modifying governance/infrastructure files. Human approval is required for all protected-path changes.
Remediation: Link an issue or provide explicit justification in the PR description for modifying infrastructure files, and obtain human reviewer approval.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (2)

Review

Findings

High

[protected-path] Dockerfile.dist — This PR modifies Dockerfile.dist, which matches the protected path Dockerfile. The PR has no linked issue providing explicit authorization for changes to governance or infrastructure files. While the author is renovate[bot] and the repository contains a renovate.json configuration that implicitly authorizes automated dependency updates, human approval is always required for protected-path changes.
Remediation: A maintainer should verify the Docker base image tag update (go-toolset:1.26.3 → 1.26.5) is expected, confirm the digest is correct, and approve the protected-path change.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (3)

Review

Findings

High

[protected-path] Dockerfile.dist — This PR modifies Dockerfile.dist, which matches the Dockerfile protected path. Protected paths (governance and infrastructure files) require human approval regardless of change content. This PR has no linked issue providing authorization context for modifying protected files. The change itself is a routine Renovate bot Docker base image tag bump (go-toolset:1.26.3 → 1.26.5 with pinned digest), but human review is required to confirm the update is safe for the build pipeline.
Remediation: A maintainer should review and approve this protected-path change. No code changes are needed — this finding gates on human oversight, not a code defect.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (4)

Review

Findings

High

[protected-path] Dockerfile.dist — This file matches the Dockerfile protected path pattern. The PR modifies a governance/infrastructure file but has no linked issue providing authorization for the change. While the PR is a Renovate-generated patch version bump (go-toolset 1.26.3 → 1.26.5 with updated digest), human approval is always required for protected-path changes.
Remediation: Obtain explicit human reviewer approval for this protected-path change.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (5)

Review

Findings

High

[protected-path] Dockerfile.dist — This PR modifies Dockerfile.dist, which falls under the Dockerfile protected path (governance/infrastructure file). The PR has no linked issue providing authorization for modifying this file. While the Renovate bot description explains the change (go-toolset patch bump from 1.26.3 to 1.26.5), human approval is always required for protected-path changes.
Remediation: Obtain explicit human approval for this protected-path modification.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (6)

Review

Findings

High

[protected-path] Dockerfile.dist — This PR modifies Dockerfile.dist, which falls under a protected path (Dockerfile). The PR has no linked issue providing justification for modifying governance or infrastructure files. Human approval is always required for protected-path changes.
Remediation: A human reviewer with infrastructure authority must approve this change. No code changes are required from the PR author.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (7)

Review

Findings

High

[protected-path] Dockerfile.dist:19 — This PR modifies Dockerfile.dist, which matches the protected path Dockerfile. The PR has no linked issue providing authorization for changes to governance or infrastructure files. Human approval is required for all protected-path changes. Note: the change is an automated Renovate bot Docker base image tag bump (go-toolset 1.26.3 → 1.26.5) and the repository has a renovate.json configuration extending from github>conforma/.github//config/renovate/renovate.json, indicating this change pattern is expected by the project's automation setup.
Remediation: A human reviewer should verify and approve this protected-path change.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (8)

Review

Findings

High

[protected-path] Dockerfile.dist:19 — Dockerfile.dist is under a protected path (Dockerfile). The PR has no linked issue justifying the change to governance/infrastructure files. This appears to be a legitimate Renovate-automated patch update of the go-toolset Docker base image (1.26.3 → 1.26.5) with pinned digest, authorized by renovate.json configuration. Human approval is always required for protected-path changes.
Remediation: A human reviewer should verify and approve this Docker base image update.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (9)

Review

Findings

High

[protected-path] Dockerfile.dist — This PR modifies Dockerfile.dist, which matches the protected Dockerfile path prefix. The PR has no linked issue providing formal authorization for modifying governance/infrastructure files. The change itself is a routine Renovate patch version bump (go-toolset 1.26.3 → 1.26.5) with digest pinning, authorized by the repository's renovate.json configuration. Human approval is required for protected-path changes regardless of risk level.
Remediation: Obtain human approval for the protected-path change.

Labels: PR modifies Dockerfile.dist (Docker base image tag update)

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

fullsend-ai-review · 2026-08-04T11:40:31Z

🤖 Review · ⚠️ Cancelled · Started 11:40 AM UTC · Ended 11:47 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-04T11:47:48Z

🤖 Finished Review · ✅ Success · Started 11:47 AM UTC · Completed 11:55 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-04T11:56:47Z

🤖 Finished Review · ✅ Success · Started 11:56 AM UTC · Completed 12:05 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-04T12:33:20Z

🤖 Finished Review · ✅ Success · Started 12:33 PM UTC · Completed 12:40 PM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-07T14:05:53Z

🤖 Finished Review · ✅ Success · Started 2:05 PM UTC · Completed 2:13 PM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-07T15:50:31Z

🤖 Finished Review · ✅ Success · Started 3:50 PM UTC · Completed 3:58 PM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-07T17:29:14Z

🤖 Finished Review · ✅ Success · Started 5:29 PM UTC · Completed 5:36 PM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-07T20:24:27Z

🤖 Finished Review · ✅ Success · Started 8:24 PM UTC · Completed 8:31 PM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-10T10:52:11Z

🤖 Finished Review · ✅ Success · Started 10:52 AM UTC · Completed 11:02 AM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-08-10T12:00:54Z

🤖 Finished Review · ✅ Success · Started 12:00 PM UTC · Completed 12:08 PM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review

See the review comment for full details.

fullsend-ai-review · 2026-08-10T12:08:43Z

 ## Build

-FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build
+FROM registry.access.redhat.com/ubi9/go-toolset:1.26.5@sha256:0b471eb04868f3d9d90bf3c668f9c6c7a22cef07474ac9fec067909dfd7dec7c AS build


[high] protected-path

This PR modifies Dockerfile.dist, which matches the protected 'Dockerfile' path pattern. Protected paths (governance and infrastructure files) require human approval for all changes. The PR has no linked issue providing authorization for modifying this protected file. The change is a Renovate bot Docker base image tag update (go-toolset 1.26.3 → 1.26.5 with pinned digest), and renovate.json is configured in the repository, indicating this is an expected automated update. The change itself is mechanical and low-risk, but human approval is required for all protected-path modifications.

Suggested fix: A human maintainer should review and approve this Docker base image update. No code changes are needed — this finding flags the protected-path governance requirement.

renovate Bot added main renovate labels Aug 4, 2026

renovate Bot enabled auto-merge August 4, 2026 01:40

github-actions Bot added the size: XS label Aug 4, 2026