chore(deps): update dependency go to v1.27.1

[renovate]

This PR contains the following updates:

Package	Update	Change
go	minor	1.26.5 → 1.27.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Configuration

📅 Schedule: (in timezone Europe/Berlin)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[joergdw]

It is too early for v1.27-adoption.

[geigerj0]

It is too early for v1.27-adoption.

why?

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

[OliverMautschke]

Can we bring this in now?

[asalan316]

Analysis

panic: crypto: RegisterHash of unknown hash function

• Autoscaler plugin uses CF CLI v8.19.0 APIs (plugin interface, models, utilities)
• Indirectly affected because CF CLI v8.19.0 pulls in broken jose library (used for JWT parsing etc)
• When plugin loads, CF CLI's jose init panic kills entire process

Why it breaks:

• jose registers crypto hash with ID 0 (crypto/none.go:11)
• Go 1.27 added check: if h == 0 || h >= maxHash { panic }
• Happens during package init, before main()

CF CLI Fix merged but not released:

• PR #3872 merged Oct 5, 2026 to v8 branch
• Replaces jose with github.com/golang-jwt/jwt/v5 (Standard Lib)
• No v8.20.0 release yet, containing the fix

Hence, wait for the CF Cli release to use go 1.27.1

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (1.27.1). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.