Skip to content

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5 (release-v0.7) - #3462

Open
renovate[bot] wants to merge 1 commit into
release-v0.7from
renovate/release-v0.7-registry.access.redhat.com-ubi9-go-toolset-1.26.x
Open

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5 (release-v0.7)#3462
renovate[bot] wants to merge 1 commit into
release-v0.7from
renovate/release-v0.7-registry.access.redhat.com-ubi9-go-toolset-1.26.x

Conversation

@renovate

@renovate renovate Bot commented Aug 5, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
registry.access.redhat.com/ubi9/go-toolset stage patch 1.26.4 → 1.26.5

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot enabled auto-merge August 5, 2026 02:23
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 5, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:24 AM UTC · Completed 2:31 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 5, 2026 •
edited
Loading

Copy link
Copy Markdown

Review

Findings

High

  • [protected-path] Dockerfile.dist:19 — This PR modifies Dockerfile.dist, which matches the Dockerfile protected path pattern (governance/infrastructure). The PR has no linked issue authorizing changes to protected paths, and the description is an auto-generated Renovate template rather than a human-authored justification. Human approval is always required for protected-path changes.
    Remediation: A human reviewer must explicitly approve this infrastructure change. The change itself (patch version bump of go-toolset from 1.26.4 to 1.26.5 with pinned digest) is straightforward, but protected-path policy requires human sign-off.

Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR
Previous run

Review

Findings

High

  • [protected-path] Dockerfile.dist:19 — Protected file Dockerfile.dist is modified (matches protected path Dockerfile). The PR has no linked issue justifying the change to this governance/infrastructure file. While the change is a mechanical Renovate dependency update (Docker base image tag bump from go-toolset:1.26.4 to go-toolset:1.26.5 with updated digest), human approval is always required for protected-path changes.
    Remediation: A human reviewer must approve changes to protected paths. No code change is needed — the version bump itself is correct.

Labels: PR modifies a Dockerfile and updates a dependency version

Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR
Previous run (2)

Review

Findings

High

  • [protected-path] Dockerfile.dist — This PR modifies Dockerfile.dist, which matches the protected path Dockerfile. The PR has no linked issue providing authorization for modifying governance/infrastructure files. While the change is a routine Renovate dependency update (go-toolset tag bump from 1.26.4 to 1.26.5 with pinned digest), human approval is always required for protected-path changes.
    Remediation: A human maintainer should review and approve this change to the protected Dockerfile. No code issues were found — the image reference is properly digest-pinned and the tag bump is straightforward.

Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@renovate
renovate Bot force-pushed the renovate/release-v0.7-registry.access.redhat.com-ubi9-go-toolset-1.26.x branch 2 times, most recently from 6a3a95f to 4652eb7 Compare August 10, 2026 10:51
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 10:53 AM UTC · Completed 11:00 AM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot added docker Pull requests that update Docker code dependencies Pull requests that update a dependency file labels Aug 10, 2026
@renovate
renovate Bot force-pushed the renovate/release-v0.7-registry.access.redhat.com-ubi9-go-toolset-1.26.x branch from 4652eb7 to 7cc001b Compare August 10, 2026 15:22
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 10, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 3:23 PM UTC · Completed 3:31 PM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]
fullsend-ai-review Bot suggested changes Aug 10, 2026
View reviewed changes

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

Comment thread Dockerfile.dist
## Build

FROM registry.access.redhat.com/ubi9/go-toolset:1.26.4@sha256:9748bb0b8e3376e9b155a4db3fbdfbfd20057b449ea9b3aed367b2f967cdfe1b AS build
FROM registry.access.redhat.com/ubi9/go-toolset:1.26.5@sha256:0b471eb04868f3d9d90bf3c668f9c6c7a22cef07474ac9fec067909dfd7dec7c AS build

@fullsend-ai-review fullsend-ai-review Bot Aug 10, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which matches the Dockerfile protected path pattern (governance/infrastructure). The PR has no linked issue authorizing changes to protected paths, and the description is an auto-generated Renovate template rather than a human-authored justification. Human approval is always required for protected-path changes.

Suggested fix: A human reviewer must explicitly approve this infrastructure change. The change itself (patch version bump of go-toolset from 1.26.4 to 1.26.5 with pinned digest) is straightforward, but protected-path policy requires human sign-off.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@fullsend-ai-review fullsend-ai-review[bot] fullsend-ai-review[bot] requested changes
Reviewers whose approvals may not affect merge requirements

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update Docker code release-v0.7 renovate size: XS

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants