Update dependency golang to v1.26.5 (main)

[renovate]

This PR contains the following updates:

Package	Update	Change
golang	patch	1.26.3 → 1.26.5

---

Release Notes

golang/go (golang)

v1.26.5

Compare Source

v1.26.4

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:17 AM UTC · Completed 1:21 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

Review of #3365 — Update dependency golang to v1.26.5

Verdict: Approve ✅

Summary

Automated Renovate patch version bump of the Go toolchain from 1.26.3 → 1.26.5 in .tool-versions (used by asdf for local development environment). This is a single-line change with no logic, API, or behavioral impact.

Dimensions reviewed

Dimension	Result
Correctness	✅ Valid .tool-versions syntax; patch bump only
Security	✅ Go patch releases typically include security fixes — no risk introduced
Intent & coherence	✅ Standard Renovate bot dependency update, appropriately scoped
Style / conventions	✅ Matches existing file format
Documentation	✅ No docs impact
Cross-repo contracts	✅ No API or interface changes

Notes

• Other Go version references in the repo (Dockerfile, Dockerfile.dist, go.mod, tools/go.mod, acceptance/go.mod) still pin to 1.26.3. This is expected Renovate behavior — different file types are typically managed by separate update rules, and container base images (especially ubi9/go-toolset) may not have 1.26.5 available yet. The go directive in go.mod specifies the minimum Go version, not the exact version. No action required for this PR.

---

Labels: Automated Go toolchain patch version bump via Renovate

Previous run

Review of #3365 — Update dependency golang to v1.26.5 (main)

Verdict: ✅ Approve

Summary

This is an automated patch version bump by Renovate, updating the Go toolchain version in .tool-versions from 1.26.3 to 1.26.5. The change is a single-line, mechanical, value-only update with zero correctness or security surface area.

Review dimensions

Dimension	Result
Correctness	✅ No issues — patch version bump with no logic surface area
Security	✅ No issues — no secrets, permissions, or injection surface
Intent & coherence	✅ Authorization inferred from mechanical nature (Renovate bot dependency bump)
Style & conventions	✅ Follows existing <tool> <version> format in .tool-versions
Documentation currency	✅ No documentation staleness — no public symbols or behavioral changes introduced
Cross-repo contracts	⏭ Skipped — no exported interfaces modified

Notes

The .tool-versions file (used by asdf/mise for local development) now declares Go 1.26.5, while go.mod files and Dockerfiles still reference Go 1.26.3. This version skew is expected — Renovate manages each dependency source independently, and go.mod/Dockerfile updates will arrive in separate PRs. The patch-level difference is fully compatible and does not cause functional issues.

Previous run (2)

Review — ✅ Approve

PR: #3365 — Update dependency golang to v1.26.5 (main)
Author: renovate[bot]
Scope: .tool-versions (1 file, +1/−1)

Summary

Routine Renovate patch-version bump of the Go toolchain from 1.26.3 → 1.26.5 in the .tool-versions file (used by asdf/mise for local development). This is a no-risk configuration change — no source code, build logic, or API surface is affected.

Analysis

Dimension	Assessment
Correctness	✅ Single-line version string replacement. Syntactically valid.
Security	✅ Go patch releases include bug fixes and security patches — updating is beneficial.
Intent & scope	✅ Matches the Renovate-managed dependency update pattern. Appropriately scoped to the .tool-versions file only.
Style/conventions	✅ Follows existing format.
Documentation	✅ No documentation impact.
Cross-repo contracts	✅ No API or schema changes.

Notes

Other files in the repo reference Go 1.26.3 (go.mod, acceptance/go.mod, tools/go.mod, Dockerfile, Dockerfile.dist). This is expected — Renovate manages each dependency manager separately, so those files will be updated in their own PRs (e.g., gomod and dockerfile managers).

No findings above the severity threshold.

---

Labels: Patch version bump for Go toolchain in .tool-versions

Previous run (3)

Review of #3365 — Update dependency golang to v1.26.5

Verdict: ✅ Approve

Summary

This is a Renovate-generated patch version bump for Go (1.26.3 → 1.26.5) in the .tool-versions file, which controls local development tooling (asdf/mise). The change is a single-line modification in a tooling configuration file.

Analysis

Dimension	Assessment
Correctness	✅ Single-line version bump in .tool-versions. Syntactically valid.
Security	✅ Patch version update — Go 1.26.5 includes bugfixes (potentially security-relevant). No risk introduced.
Intent & scope	✅ Matches Renovate's declared purpose. Appropriately scoped to the .tool-versions manager.
Style	✅ No conventions apply to this file format.
Docs	✅ No documentation impact.
Cross-repo contracts	✅ .tool-versions is a local development concern; no cross-repo impact.

Notes

• Other Go version references (go.mod, Dockerfile, Dockerfile.dist) remain at 1.26.3. This is expected — Renovate manages these through separate managers and will generate separate PRs. The go.mod directive specifies a minimum version, so using 1.26.5 locally is fully compatible.
• Go patch releases are backwards-compatible bugfix-only releases per Go's release policy.

No findings above the reporting threshold.

Previous run (4)

Review of PR #3365 — Update dependency golang to v1.26.5

Verdict: ✅ Approve

Summary

This is an automated Renovate patch-version bump of the Go toolchain from 1.26.3 to 1.26.5 in .tool-versions (used by asdf/mise for local development tooling). The change is a single-line version string update with no code, logic, or behavioral impact.

Analysis

Dimension	Result
Correctness	✅ Valid .tool-versions format; version string is syntactically correct
Security	✅ Patch updates typically include security fixes — updating is security-positive
Intent & coherence	✅ Standard automated dependency management; appropriately scoped to a single package manager
Style & conventions	✅ Matches existing file format
Documentation	✅ No documentation impact
Cross-repo contracts	✅ No API or schema changes

Notes

Other files in the repository reference Go 1.26.3 (go.mod, Dockerfile, Dockerfile.dist, acceptance/go.mod, tools/go.mod, tools/kubectl/go.mod). These are managed by separate Renovate managers and will receive their own update PRs — this is expected behavior, not a gap in this PR.

No findings.

---

Labels: Automated patch-version bump of Go toolchain dependency

Previous run (5)

Review of #3365 — Update dependency golang to v1.26.5

Verdict: ✅ Approve

Summary

This is a standard Renovate patch version bump updating the Go toolchain version in .tool-versions from 1.26.3 to 1.26.5. The change is a single-line modification in a development tooling configuration file used by asdf/mise for local development environments.

Analysis

Dimension	Assessment
Correctness	✅ Single-line version string update. No logic to break.
Security	✅ Patch version bump of Go toolchain from official source. No risk.
Intent & scope	✅ Matches the PR title and Renovate configuration. Appropriately scoped to the asdf/mise manager.
Style/conventions	✅ Follows existing .tool-versions format.
Documentation	✅ No documentation impact.
Cross-repo contracts	✅ No API or schema changes.

Notes

• Other files referencing Go 1.26.3 (Dockerfile, Dockerfile.dist, go.mod, acceptance/go.mod, tools/go.mod, tools/kubectl/go.mod) are managed by separate Renovate managers (dockerfile, gomod) and will receive their own update PRs. This is expected Renovate behavior, not a gap in this PR.
• The bump skips v1.26.4, going directly to v1.26.5 — this is normal when multiple patch releases occur between Renovate runs.

No blocking findings. Safe to merge.

Previous run (6)

Review — comment

PR: #3365 — Update dependency golang to v1.26.5 (main)
Author: renovate[bot] | Base: main | Head: f7d41c2

Summary

This is an automated Renovate PR that bumps the Go version from 1.26.3 to 1.26.5 in .tool-versions (used by asdf/mise for local toolchain management). The change is a clean, single-line patch version bump with no security concerns.

However, .tool-versions is not the only file that pins the Go version. The repository has six other files still referencing 1.26.3:

File	Current	Purpose
go.mod	go 1.26.3	CI reads this via go-version-file: go.mod
acceptance/go.mod	go 1.26.3	Acceptance test module
tools/go.mod	go 1.26.3	Tooling module
tools/kubectl/go.mod	go 1.26.3	kubectl tooling module
Dockerfile	golang:1.26.3	Container build base image
Dockerfile.dist	go-toolset:1.26.3@sha256:17c888d...	Distribution build base image (digest-pinned)

Since CI workflows use go-version-file: go.mod (not .tool-versions) and the repo has a golang-version-check CI step, merging this PR alone may either be caught by CI or create a version mismatch between local development and CI/production builds.

Findings

🔶 Version consistency — go.mod files (×4) medium

All four go.mod files (go.mod, acceptance/go.mod, tools/go.mod, tools/kubectl/go.mod) still declare go 1.26.3. CI uses go-version-file: go.mod to select the Go toolchain, so CI builds will continue using Go 1.26.3 regardless of this PR.

🔶 Version consistency — Dockerfiles (×2) medium

Dockerfile uses golang:1.26.3 and Dockerfile.dist uses go-toolset:1.26.3@sha256:17c888d... as build base images. Container builds will continue using Go 1.26.3.

Recommendation

If Renovate manages go.mod and Dockerfiles via separate PRs, coordinate the merge order or consider configuring Renovate to group all Go version pins into a single PR to avoid transient inconsistencies.

Dimensions reviewed

Dimension	Result
Correctness	🔶 Version inconsistency across 6 files
Security	✅ No issues
Intent & coherence	✅ Mechanical change, authorization implicit
Style & conventions	✅ Value follows existing pattern
Documentation currency	✅ No stale docs
Cross-repo contracts	⏭ Skipped (no exported interfaces changed)

Previous run (7)

Review

Verdict: Approve ✅

Summary

Standard Renovate patch version bump of the Go toolchain from 1.26.3 to 1.26.5 in .tool-versions (asdf/mise local development tooling configuration).

Analysis

Dimension	Result
Correctness	✅ Valid patch version update; .tool-versions format is correct
Security	✅ Patch updates typically include security fixes — beneficial
Intent & Scope	✅ Automated dependency update, single file, appropriately scoped
Style	✅ Consistent with existing format
Documentation	✅ No documentation changes needed
Cross-repo contracts	✅ No API or interface changes

Notes

• The go.mod files and Dockerfile still reference Go 1.26.3. This is expected — .tool-versions controls local developer tooling and is typically updated independently from build-time Go version pins. Renovate likely manages these through separate update groups.
• This is a patch-level bump (1.26.3 → 1.26.5), which carries minimal risk and may include important bug fixes and security patches.

Previous run (8)

Review of #3365 — Update dependency golang to v1.26.5

Verdict: ✅ Approve

This is a straightforward Renovate patch-version bump of the Go toolchain in .tool-versions from 1.26.3 to 1.26.5. The change is a single-line substitution in a tooling configuration file with no functional code impact.

What was reviewed

Dimension	Result
Correctness	✅ No logic changes. Valid patch version bump.
Security	✅ Patch updates to Go typically include security fixes — this is beneficial.
Intent & coherence	✅ Renovate bot updating dependencies per configured schedule. Matches project's dependency management strategy.
Style/conventions	✅ Follows existing .tool-versions format.
Documentation	✅ No documentation impact.
Cross-repo contracts	✅ No API or interface changes.

Notes

• The Go version in Dockerfile (line 19), Dockerfile.dist (line 19), and go.mod files remains at 1.26.3. These are managed by separate Renovate datasource rules (Docker images, Go modules) and will be updated in their own PRs. This is standard Renovate behavior and does not represent a consistency issue.
• Auto-merge is enabled on this PR, which is appropriate for a patch-level dependency update.

No findings.

---

Labels: Patch-level Go toolchain version bump via Renovate

Previous run (9)

Review

Verdict: Approve

This is an automated Renovate patch version bump of Go from 1.26.3 to 1.26.5 in .tool-versions (the asdf/mise version manager configuration). The change is minimal and safe.

Analysis

Correctness: No logic or behavior changes. The .tool-versions file controls which Go version local developer tooling (asdf/mise) installs. A Go patch bump is backward compatible by the Go compatibility promise.

Security: Go patch releases typically bundle security fixes. Updating to 1.26.5 is a positive security posture improvement for local development environments.

Scope & intent: Automated dependency maintenance by Renovate, consistent with the project's renovate.json configuration and existing labels (dependencies, go, renovate).

Note

The Go version 1.26.3 is still referenced in several other files (Dockerfile, Dockerfile.dist, go.mod, acceptance/go.mod, tools/go.mod, tools/kubectl/go.mod). These are managed by separate Renovate managers and will likely be updated in their own PRs. For a patch version bump this creates no compatibility risk, but the version drift is worth tracking.

No blocking findings. Safe to merge.

---

Labels: Automated Go toolchain patch version bump via Renovate

Previous run (10)

Review

Outcome: Approve

Summary

Automated Renovate patch version bump of Go toolchain in .tool-versions (1.26.3 → 1.26.4). Single-line change with no impact on application logic, APIs, or build artifacts.

Analysis

Dimension	Result
Correctness	✅ Valid .tool-versions syntax; patch-level bump with no behavioral impact
Security	✅ Go patch releases typically bundle security fixes — updating is beneficial
Intent & coherence	✅ Standard Renovate dependency maintenance, appropriately scoped
Style & conventions	✅ File format consistent with existing convention
Documentation	✅ No documentation impacted
Cross-repo contracts	✅ No APIs or interfaces affected

Note: Other files referencing Go 1.26.3 (go.mod, Dockerfile, Dockerfile.dist) are managed by separate Renovate rules/managers and will be updated in their own PRs. This is expected behavior.

No findings.

Previous run (11)

Review — Approve

Change summary: Automated Renovate patch-level Go version bump in .tool-versions from 1.26.3 → 1.26.4.

This is a single-line change to the asdf/mise tooling version file. The diff is correct and follows the existing format.

Analysis

Dimension	Result
Correctness	✅ Valid Go version string; patch bump is safe
Security	✅ Patch releases typically include security fixes — updating is recommended
Intent & coherence	✅ Standard automated dependency maintenance, appropriately scoped
Style/conventions	✅ Follows existing .tool-versions format
Documentation	✅ No documentation impact
Cross-repo contracts	✅ No API or interface changes

Observation

Version consistency (low): After this PR merges, .tool-versions will specify Go 1.26.4, while go.mod (root + tools/, tools/kubectl/, acceptance/), Dockerfile, and Dockerfile.dist still reference Go 1.26.3. This is typical for Renovate, which manages different package managers via separate PRs. Since this is a patch-level bump, the divergence carries negligible risk — local dev tooling at 1.26.4 is fully compatible with 1.26.3 build targets. Expect Renovate to update the remaining references in separate PRs.

No blocking findings. Safe to merge.

---

Labels: Automated patch-level Go toolchain version bump via Renovate

Previous run (12)

Looks good to me

Previous run (13)

Looks good to me

Previous run (14)

Looks good to me

---

Labels: PR is an automated Go dependency patch update

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:39 PM UTC · Completed 2:43 PM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 7:52 PM UTC · Completed 7:55 PM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 9:43 AM UTC · Completed 9:46 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:03 PM UTC · Completed 1:06 PM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:40 PM UTC · Completed 3:43 PM UTC
Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 7:20 PM UTC · Completed 7:24 PM UTC
Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 12:13 PM UTC · Completed 12:17 PM UTC
Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 12:48 PM UTC · Completed 12:52 PM UTC
Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:05 PM UTC · Completed 1:10 PM UTC
Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 7:58 PM UTC · Completed 8:02 PM UTC
Commit: 87c4a29 · View workflow run →