Update docker.io/library/golang Docker tag to v1.26.3 (main)

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change	Pending
docker.io/library/golang	stage	minor	1.25.8 → 1.26.3	1.26.4

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:27 AM UTC · Completed 1:34 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

Review

Findings

High

• [protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is a protected governance/infrastructure file. The PR has no linked issue providing authorization for this change. While the change itself is a straightforward Go version bump (1.25.8 → 1.26.3) from the Renovate bot, protected-path changes require human review and justification via a linked issue.
  Remediation: Link an issue authorizing this Dockerfile change, or obtain explicit human maintainer approval.

---

Labels: PR modifies the Dockerfile to bump the Go builder image, matching docker and dependencies labels.

Previous run

Review

Findings

Medium

• [version mismatch] Dockerfile:19 — The Dockerfile bumps the build image from golang:1.25.8 to golang:1.26.4, but go.mod (and tools/kubectl/go.mod, tools/go.mod, acceptance/go.mod) all still declare go 1.25.8. There is no toolchain directive in any go.mod. Building a go-1.25.8-declared module with a Go 1.26 toolchain may introduce differing default GODEBUG values and vet behavior between Docker builds and local/CI builds that use Go 1.25.8, and this is a minor-version jump rather than a patch bump.
  Remediation: Either (a) update all four go.mod files to go 1.26.4, or (b) keep the Dockerfile at a 1.25.x patch release matching go.mod. If intentionally using a newer toolchain, add a toolchain go1.26.4 directive to go.mod to make the intent explicit.

Info

• [sub-agent-failure] The style-conventions sub-agent did not return findings due to model unavailability. This dimension was not evaluated.

Previous run (2)

Review

Findings

Low

• [stale-reference] Dockerfile.dist:19 — Dockerfile.dist still references Go 1.25.8 (via go-toolset:1.25.8). The two Dockerfiles now specify different Go toolchain versions (1.26.3 vs 1.25.8), which could produce binaries with different language-level behavior depending on which Dockerfile is used for the build. This is expected since Dockerfile.dist uses the Red Hat go-toolset image from a different registry with its own release cadence — no action needed unless the versions are intended to stay in sync.

• [version-mismatch] go.mod:3 — go.mod declares go 1.25.8 while the Dockerfile now builds with Go 1.26.3. This is not a build error (Go is backward-compatible), but the module's declared minimum version is a full minor release behind the actual build toolchain.

• [version-mismatch] .tool-versions:1 — .tool-versions still pins golang 1.25.8. Local developer builds will use a different Go version than the Docker build, potentially masking version-specific issues.

Info

• [missing-authorization] Dockerfile:19 — No linked issue. Authorization inferred from the mechanical nature of the change (automated Renovate bot dependency version bump).

[fullsend-ai-review]

[info] missing-authorization

No linked issue. Authorization inferred from the mechanical nature of the change (automated Renovate bot dependency version bump).

[fullsend-ai-review]

🤖 Review · ⚠️ Cancelled · Started 3:12 AM UTC · Ended 3:18 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:20 AM UTC · Completed 3:25 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:46 AM UTC · Completed 2:51 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

See the review comment for full details.

[fullsend-ai-review]

[high] protected-path

This PR modifies Dockerfile, which is a protected governance/infrastructure file. The PR has no linked issue providing authorization for this change. While the change itself is a straightforward Go version bump (1.25.8 to 1.26.3) from the Renovate bot, protected-path changes require human review and justification via a linked issue.

Suggested fix: Link an issue authorizing this Dockerfile change, or obtain explicit human maintainer approval.