Skip to content

chore(deps): Upgrade golang to 1.26.7 (v0.7 branch) - #3544

Merged
robnester-rh merged 2 commits into
conforma:release-v0.7from
simonbaird:golang-upgrade-v07
Sep 9, 2026
Merged

chore(deps): Upgrade golang to 1.26.7 (v0.7 branch)#3544
robnester-rh merged 2 commits into
conforma:release-v0.7from
simonbaird:golang-upgrade-v07

Conversation

@simonbaird

Copy link
Copy Markdown
Member

No description provided.

Should fix several golang CVEs.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@coderabbitai

coderabbitai Bot commented Sep 9, 2026

Copy link
Copy Markdown

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: e94ae30c-f4a4-4d9f-9103-d6f63aab26c5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@qodo-for-conforma

Copy link
Copy Markdown

PR Summary by Qodo

Upgrade Go toolchain to 1.26.7 on v0.7

⚙️ Configuration changes 🕐 Less than 10 minutes

Grey Divider

AI Description

• Upgrade Go declarations from 1.26.4 to 1.26.7 across all modules.
• Align standard and Red Hat container builders with patched Go images.
• Address known Go CVEs while keeping local and containerized builds consistent.
Diagram

graph TD
  G["Go 1.26.7"] --> L["Local Tooling"]
  G --> B["Container Builders"]
  G --> M["Module Metadata"]
  B --> D["Docker Builder"]
  B --> U["UBI Builder"]
  M --> A["Application Modules"]
  M --> T["Tool Modules"]
Loading
High-Level Assessment

The synchronized explicit version bump is appropriate because Go module directives and builder image references must each declare their toolchain version. Centralizing the value would not remove the required go.mod declarations and could obscure digest-pinned container dependencies.

Files changed (7) +7 / -7

Other (7) +7 / -7
.tool-versionsSet the local Go toolchain to 1.26.7 +1/-1

Set the local Go toolchain to 1.26.7

• Updates the asdf-compatible toolchain declaration so local development uses the patched Go release.

.tool-versions

DockerfileUpgrade the standard Go builder image +1/-1

Upgrade the standard Go builder image

• Changes the standard container build stage from Go 1.26.4 to 1.26.7.

Dockerfile

Dockerfile.distUpgrade and repin the Red Hat Go builder +1/-1

Upgrade and repin the Red Hat Go builder

• Moves the UBI9 Go toolset builder to 1.26.7 and updates its immutable image digest.

Dockerfile.dist

go.modRaise the acceptance module Go version +1/-1

Raise the acceptance module Go version

• Sets Go 1.26.7 as the language and toolchain baseline for acceptance tests.

acceptance/go.mod

go.modRaise the primary module Go version +1/-1

Raise the primary module Go version

• Sets Go 1.26.7 as the baseline for the main CLI module.

go.mod

go.modRaise the tools module Go version +1/-1

Raise the tools module Go version

• Aligns repository development and build tools with Go 1.26.7.

tools/go.mod

go.modRaise the kubectl tools module Go version +1/-1

Raise the kubectl tools module Go version

• Aligns the isolated kubectl tooling module with Go 1.26.7.

tools/kubectl/go.mod

@qodo-for-conforma

Copy link
Copy Markdown

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Grey Divider

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

Grey Divider

Tip of the day
💡 Did you know, you can commit Qodo's fix in one click with committable suggestions (GitHub & GitLab)

More tips ↗ | Customize Qodo ↗ | Qodo docs ↗

Grey Divider

Qodo Logo

Back-ports the action pinning from main (2979d83) and pins the
remaining unpinned action per stricter GitHub policies:

- conforma/github-workflows auto-merge and golang-version-check
  pinned to e049ae95 (main)
- jlumbroso/free-disk-space pinned to 54081f13 (v1.3.1), matching main

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
@codecov

codecov Bot commented Sep 9, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
generative 69.55% <ø> (ø)
integration 69.55% <ø> (ø)
unit 69.55% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@robnester-rh robnester-rh left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@robnester-rh
robnester-rh merged commit 8ac2ebe into conforma:release-v0.7 Sep 9, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants