Skip to content

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5-1786023237 (main) #3368

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
red-hat-konflux wants to merge 1 commit into
base: main
Choose a base branch
from
+1 −1
Open

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5-1786023237 (main) #3368

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile.dist
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@

## Build

FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build
FROM registry.access.redhat.com/ubi9/go-toolset:1.26.5-1786023237@sha256:5d26ff5606bd6590930e7cfc202b510e3fe2c7a7a1720860f444ab49c45128cb AS build

Check failure on line 19 in Dockerfile.dist

View workflow job for this annotation

GitHub Actions / Test 

Containerfile version incompatible, saw 1.26.5, running with version: 1.26.3

@fullsend-ai-review fullsend-ai-review Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

Dockerfile.dist matches the protected path 'Dockerfile'. The PR has no linked issue providing authorization for modifying governance or infrastructure files. The change is an automated Renovate dependency bump of the go-toolset base image from 1.26.3 to 1.26.5-1786023237 with a pinned SHA256 digest, but human approval is always required for protected-path changes.

@fullsend-ai-review fullsend-ai-review Bot Aug 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] protected-path

Dockerfile.dist matches the protected path 'Dockerfile' and requires human approval. The PR is an automated Renovate dependency update (go-toolset 1.26.3 to 1.26.5-1786023237) with clear rationale: the base image remains digest-pinned from the trusted registry.access.redhat.com registry. Human approval is always required for protected-path changes regardless of context.

@fullsend-ai-review fullsend-ai-review Bot Aug 8, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which falls under the Dockerfile protected path. Protected paths contain governance and infrastructure files that require human approval regardless of change size or nature. The PR has no linked issue providing authorization for the change.

Suggested fix: Obtain human review and approval for the Dockerfile change. Consider linking an issue that authorizes the dependency update.


ARG TARGETOS
ARG TARGETARCH
Expand Down
Loading