Skip to content

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5 (main) #3456

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
renovate wants to merge 1 commit into
base: main
Choose a base branch
from
+1 −1
Open

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.5 (main) #3456

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile.dist
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@

## Build

FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build
FROM registry.access.redhat.com/ubi9/go-toolset:1.26.5@sha256:5d26ff5606bd6590930e7cfc202b510e3fe2c7a7a1720860f444ab49c45128cb AS build

Check failure on line 19 in Dockerfile.dist

View workflow job for this annotation

GitHub Actions / Test 

Containerfile version incompatible, saw 1.26.5, running with version: 1.26.3

@fullsend-ai-review fullsend-ai-review Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which falls under the Dockerfile protected path (governance/infrastructure file). The PR has no linked issue providing authorization for modifying this file. While the Renovate bot description explains the change (go-toolset patch bump from 1.26.3 to 1.26.5), human approval is always required for protected-path changes.

Suggested fix: Obtain explicit human approval for this protected-path modification.

@fullsend-ai-review fullsend-ai-review Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

Dockerfile.dist matches the Dockerfile protected path pattern. The PR modifies a governance/infrastructure file but has no linked issue providing authorization for the change. While the PR is a Renovate-generated patch version bump (go-toolset 1.26.3 → 1.26.5 with updated digest), human approval is always required for protected-path changes.

Suggested fix: Obtain explicit human reviewer approval for this protected-path change.

@fullsend-ai-review fullsend-ai-review Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which matches the Dockerfile protected path. Protected paths (governance and infrastructure files) require human approval regardless of change content. This PR has no linked issue providing authorization context for modifying protected files. The change itself is a routine Renovate bot Docker base image tag bump (go-toolset:1.26.3 → 1.26.5 with pinned digest), but human review is required to confirm the update is safe for the build pipeline.

Suggested fix: A maintainer should review and approve this protected-path change. No code changes are needed — this finding gates on human oversight, not a code defect.

@fullsend-ai-review fullsend-ai-review Bot Aug 7, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which matches the protected path 'Dockerfile'. The PR has no linked issue providing explicit authorization for changes to governance or infrastructure files. While the author is renovate[bot] and the repository contains a renovate.json configuration that implicitly authorizes automated dependency updates, human approval is always required for protected-path changes.

Suggested fix: A maintainer should verify the Docker base image tag update (go-toolset:1.26.3 → 1.26.5) is expected, confirm the pinned digest is correct, and approve the protected-path change.


ARG TARGETOS
ARG TARGETARCH
Expand Down
Loading