Skip to content

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.7-1789040808 (main) #3368

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
red-hat-konflux wants to merge 1 commit into
base: main
Choose a base branch
from
+1 −1
Open

Update registry.access.redhat.com/ubi9/go-toolset Docker tag to v1.26.7-1789040808 (main) #3368

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile.dist
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@

## Build

FROM registry.access.redhat.com/ubi9/go-toolset:1.26.7@sha256:685ccca486cc2c82b0818d835abecb1aed7a396e76ba416cfc47c28067f5d365 AS build
FROM registry.access.redhat.com/ubi9/go-toolset:1.26.7-1789040808@sha256:685ccca486cc2c82b0818d835abecb1aed7a396e76ba416cfc47c28067f5d365 AS build

@fullsend-ai-review fullsend-ai-review Bot Sep 11, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] protected-path

PR modifies Dockerfile.dist, which matches the Dockerfile entry in the active protected paths list (REVIEW_PROTECTED_PATHS). Human approval is always required for protected-path changes, regardless of context. The change is an automated Renovate/MintMaker base-image bump by the authorized red-hat-konflux bot: UBI9 go-toolset tag 1.26.7 -> 1.26.7-1789040808 with matching @sha256 digest update. Both tag and digest changed together; pinning discipline preserved. No code-level issues surfaced by correctness, security, or style sub-agents.

Suggested fix: Human reviewer: verify the new digest sha256:685ccca486cc2c82b0818d835abecb1aed7a396e76ba416cfc47c28067f5d365 corresponds to the intended 1.26.7-1789040808 tag of registry.access.redhat.com/ubi9/go-toolset (e.g., via skopeo inspect docker://registry.access.redhat.com/ubi9/go-toolset:1.26.7-1789040808), then approve.

@fullsend-ai-review fullsend-ai-review Bot Sep 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] protected-path

PR modifies Dockerfile.dist which matches the protected-path prefix Dockerfile. Change is a MintMaker/Renovate automated patch bump of ubi9/go-toolset (1.26.7 -> 1.26.7-1789040808) with sha256 digest re-pinned to 685ccca486cc2c82b0818d835abecb1aed7a396e76ba416cfc47c28067f5d365 from registry.access.redhat.com. Rationale is clear from PR body, but human approval is always required for protected-path changes regardless of context.

Suggested fix: Human reviewer to confirm the tag/digest bump is acceptable and merge (or dismiss) accordingly. No code change needed.

@fullsend-ai-review fullsend-ai-review Bot Sep 12, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] protected-path

Dockerfile.dist matches the "Dockerfile" entry in the protected-paths list (prefix match). This PR bumps the ubi9/go-toolset base image tag from 1.26.7 to 1.26.7-1789040808 with an updated pinned digest. Standing automation authorization exists (renovate.json extends the shared conforma Renovate config; MintMaker labels applied; bot author), but human approval is always required for protected-path changes to confirm the intended upstream release and that the pinned digest resolves to the expected image.

Suggested fix: Human reviewer: confirm the new tag 1.26.7-1789040808 corresponds to the intended Red Hat go-toolset patch release and that the pinned digest sha256:685ccca486cc2c82b0818d835abecb1aed7a396e76ba416cfc47c28067f5d365 matches the trusted upstream, then approve.


@fullsend-ai-review fullsend-ai-review Bot Sep 11, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] protected-path

Modifies a file matching the protected path pattern Dockerfile. Human approval is always required for protected-path changes, regardless of context. This PR is a Renovate/MintMaker automated patch update (ubi9/go-toolset:1.26.7 -> 1.26.7-1789040808) with a pinned digest, authored by red-hat-konflux[bot]; the requires-manual-review label is already applied. Reviewer confirmation is required before merge.

Suggested fix: Human reviewer must inspect the change and approve manually before merging.

ARG TARGETOS
ARG TARGETARCH
Expand Down
Loading