Skip to content

Update docker.io/library/golang Docker tag to v1.27.0 (main) - #3512

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main-main/docker.io-library-golang-1.x
Open

Update docker.io/library/golang Docker tag to v1.27.0 (main)#3512
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main-main/docker.io-library-golang-1.x

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Aug 20, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
docker.io/library/golang stage minor 1.26.31.27.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 20, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:45 AM UTC · Completed 2:52 AM UTC

Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 20, 2026

Copy link
Copy Markdown

Review

Findings

High

  • [protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is under protected paths. The PR has no linked issue providing explicit authorization for this change. While this appears to be a routine renovate bot dependency update (golang 1.26.3 → 1.27.0 with pinned digest), human approval is always required for changes to protected governance and infrastructure files.
    Remediation: Obtain human reviewer approval for this protected-path change.

Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR
Previous run

Review

Findings

High

  • [protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is under a protected path requiring human approval. The PR has no linked issue providing authorization for the change. While the Renovate bot description explains this is a golang base image update from 1.26.3 to 1.27.0, protected-path changes require explicit issue-based authorization.
    Remediation: Link an issue authorizing the Dockerfile change, or obtain explicit human approval for this dependency update.

Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR
Previous run (2)

Review

Findings

High

  • [protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected governance/infrastructure file requiring human approval. The PR has no linked issue providing authorization or justification for the change. While this is an automated Renovate dependency update (golang 1.26.3 → 1.27.0), protected-path changes always require explicit human review regardless of the change mechanism.
    Remediation: A human maintainer must review and approve changes to protected files. No automated approval is permitted for governance/infrastructure paths.

Labels: PR modifies Dockerfile with a dependency version update


Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added docker Pull requests that update Docker code dependencies Pull requests that update a dependency file labels Aug 20, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/docker.io-library-golang-1.x branch from 4f499f8 to b635f4b Compare August 20, 2026 02:55
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 20, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:56 AM UTC · Completed 3:04 AM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/docker.io-library-golang-1.x branch from b635f4b to 29a4b90 Compare August 26, 2026 03:04
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 26, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 3:05 AM UTC · Completed 3:15 AM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.14

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

Comment thread Dockerfile
## Build

FROM docker.io/library/golang:1.26.3@sha256:2d6c80227255c3112a4d08e67ba98e58efd3846daf15d9d7d4c389565d881b1a AS build
FROM docker.io/library/golang:1.27.0@sha256:0ecdc2a9f6156af6451080bfe3d8382a662fcc4e209608c6f919e643453514c1 AS build

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile, which is under protected paths. The PR has no linked issue providing explicit authorization for this change. While this appears to be a routine renovate bot dependency update (golang 1.26.3 to 1.27.0 with pinned digest), human approval is always required for changes to protected governance and infrastructure files.

Suggested fix: Obtain human reviewer approval for this protected-path change.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file docker Pull requests that update Docker code main renovate size: XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants