Skip to content

chore(deps): Upgrade golang to 1.26.7 (v0.8 branch) #3545

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
robnester-rh merged 3 commits into from
Sep 9, 2026
Merged

chore(deps): Upgrade golang to 1.26.7 (v0.8 branch) #3545

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
6ce25bf
chore(deps): Upgrade golang to 1.26.7
simonbaird Sep 9, 2026
7bc9c9a
ci: Pin GitHub Actions to commit SHAs
simonbaird Sep 9, 2026
240c717
Pin acceptance test release-v0.8 policy repo ref
simonbaird Sep 9, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/auto-merge.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -22,7 +22,7 @@ name: 'Auto merge'

jobs:
auto-merge:
uses: conforma/github-workflows/.github/workflows/auto-merge.yaml@main
uses: conforma/github-workflows/.github/workflows/auto-merge.yaml@e049ae95d6a78c4665e88efa667981184394e913 # main
secrets: inherit
permissions:
pull-requests: write
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/checks-codecov.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,7 +61,7 @@ jobs:
cache: false

- name: Check go versions
uses: conforma/github-workflows/golang-version-check@main
uses: conforma/github-workflows/golang-version-check@e049ae95d6a78c4665e88efa667981184394e913 # main

- name: Show git sha and commit subject
run: git log --oneline -n1
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/label-pr-size.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,4 +29,4 @@ jobs:
runs-on: ubuntu-latest
steps:
- name: Label PR by size
uses: conforma/pr-size-label-action@v1.0.0
uses: conforma/pr-size-label-action@8b1fcdb87ab3ef4b79f9708fedf686904375e2d3 # v1.0.0
2 changes: 1 addition & 1 deletion .github/workflows/release.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -73,7 +73,7 @@ jobs:
# disable-telemetry: true

- name: Free Disk Space (Ubuntu)
uses: jlumbroso/free-disk-space@main
uses: jlumbroso/free-disk-space@54081f138730dfa15788a46383842cd2f914a1be # v1.3.1
with:
docker-images: false
swap-storage: false
Expand Down
2 changes: 1 addition & 1 deletion .tool-versions
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1 +1 @@
golang 1.26.4
golang 1.26.7
2 changes: 1 addition & 1 deletion Dockerfile
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@

## Build

FROM docker.io/library/golang:1.26.4 AS build
FROM docker.io/library/golang:1.26.7 AS build

ARG TARGETOS
ARG TARGETARCH
Expand Down
2 changes: 1 addition & 1 deletion Dockerfile.dist
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@

## Build

FROM registry.access.redhat.com/ubi9/go-toolset:1.26.4@sha256:9748bb0b8e3376e9b155a4db3fbdfbfd20057b449ea9b3aed367b2f967cdfe1b AS build
FROM registry.access.redhat.com/ubi9/go-toolset:1.26.7@sha256:5e68f09a652ac6627a83c57655e42e24575efb278b54336039c9308607fc6b21 AS build

ARG TARGETOS
ARG TARGETARCH
Expand Down
2 changes: 1 addition & 1 deletion acceptance/go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
module github.com/conforma/cli/acceptance

go 1.26.4
go 1.26.7

require (
cuelang.org/go v0.16.0
Expand Down
8 changes: 4 additions & 4 deletions features/ta_task_validate_image.feature
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -25,8 +25,8 @@ Feature: Verify Conforma Trusted Artifact Tekton Task
"sources": [
{
"policy": [
"git::github.com/conforma/policy//policy/release?ref=release-v0.8",
"git::github.com/conforma/policy//policy/lib?ref=release-v0.8"
"git::github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a",
"git::github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"
],
"config": {
"include": [
Expand Down Expand Up @@ -65,7 +65,7 @@ Feature: Verify Conforma Trusted Artifact Tekton Task
When version 0.1 of the task named "verify-conforma-konflux-ta" is run with parameters:
| SNAPSHOT_FILENAME | snapshotartifact |
| SOURCE_DATA_ARTIFACT | oci:${REGISTRY}/acceptance/snapshotartifact@${BUILD_SNAPSHOT_DIGEST} |
| POLICY_CONFIGURATION | {"publicKey":"-----BEGIN PUBLIC KEY-----\\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERhr8Zj4dZW67zucg8fDr11M4lmRp\\nzN6SIcIjkvH39siYg1DkCoa2h2xMUZ10ecbM3/ECqvBV55YwQ2rcIEa7XQ==\\n-----END PUBLIC KEY-----","sources":[{"policy":["git::github.com/conforma/policy//policy/release?ref=release-v0.8","git::github.com/conforma/policy//policy/lib?ref=release-v0.8"],"config":{"include":["slsa_provenance_available"]}}]} |
| POLICY_CONFIGURATION | {"publicKey":"-----BEGIN PUBLIC KEY-----\\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERhr8Zj4dZW67zucg8fDr11M4lmRp\\nzN6SIcIjkvH39siYg1DkCoa2h2xMUZ10ecbM3/ECqvBV55YwQ2rcIEa7XQ==\\n-----END PUBLIC KEY-----","sources":[{"policy":["git::github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a","git::github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"],"config":{"include":["slsa_provenance_available"]}}]} |
| STRICT | true |
| IGNORE_REKOR | true |
| ENABLE_VSA | true |
Expand All @@ -90,7 +90,7 @@ Feature: Verify Conforma Trusted Artifact Tekton Task
When version 0.1 of the task named "verify-conforma-konflux-ta" is run with parameters:
| SNAPSHOT_FILENAME | snapshotartifact |
| SOURCE_DATA_ARTIFACT | oci:${REGISTRY}/acceptance/snapshotartifact@${BUILD_SNAPSHOT_DIGEST} |
| POLICY_CONFIGURATION | {"publicKey":"-----BEGIN PUBLIC KEY-----\\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERhr8Zj4dZW67zucg8fDr11M4lmRp\\nzN6SIcIjkvH39siYg1DkCoa2h2xMUZ10ecbM3/ECqvBV55YwQ2rcIEa7XQ==\\n-----END PUBLIC KEY-----","sources":[{"policy":["git::github.com/conforma/policy//policy/release?ref=release-v0.8","git::github.com/conforma/policy//policy/lib?ref=release-v0.8"],"config":{"include":["slsa_provenance_available"]}}]} |
| POLICY_CONFIGURATION | {"publicKey":"-----BEGIN PUBLIC KEY-----\\nMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAERhr8Zj4dZW67zucg8fDr11M4lmRp\\nzN6SIcIjkvH39siYg1DkCoa2h2xMUZ10ecbM3/ECqvBV55YwQ2rcIEa7XQ==\\n-----END PUBLIC KEY-----","sources":[{"policy":["git::github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a","git::github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"],"config":{"include":["slsa_provenance_available"]}}]} |
| STRICT | true |
| IGNORE_REKOR | true |
| TRUSTED_ARTIFACTS_DEBUG | "true" |
Expand Down
32 changes: 16 additions & 16 deletions features/task_validate_image.feature
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,8 +16,8 @@ Feature: Verify Enterprise Contract Tekton Tasks
"sources": [
{
"policy": [
"github.com/conforma/policy//policy/release?ref=release-v0.8",
"github.com/conforma/policy//policy/lib?ref=release-v0.8"
"github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a",
"github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"
],
"config": {
"include": [
Expand Down Expand Up @@ -47,8 +47,8 @@ Feature: Verify Enterprise Contract Tekton Tasks
"sources": [
{
"policy": [
"github.com/conforma/policy//policy/release?ref=release-v0.8",
"github.com/conforma/policy//policy/lib?ref=release-v0.8"
"github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a",
"github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"
],
"config": {
"include": [
Expand Down Expand Up @@ -78,8 +78,8 @@ Feature: Verify Enterprise Contract Tekton Tasks
"sources": [
{
"policy": [
"github.com/conforma/policy//policy/release?ref=release-v0.8",
"github.com/conforma/policy//policy/lib?ref=release-v0.8"
"github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a",
"github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"
],
"config": {
"include": [
Expand Down Expand Up @@ -110,8 +110,8 @@ Feature: Verify Enterprise Contract Tekton Tasks
"sources": [
{
"policy": [
"github.com/conforma/policy//policy/release?ref=release-v0.8",
"github.com/conforma/policy//policy/lib?ref=release-v0.8"
"github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a",
"github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"
],
"config": {
"include": [
Expand Down Expand Up @@ -147,8 +147,8 @@ Feature: Verify Enterprise Contract Tekton Tasks
"sources": [
{
"policy": [
"github.com/conforma/policy//policy/release?ref=release-v0.8",
"github.com/conforma/policy//policy/lib?ref=release-v0.8"
"github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a",
"github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"
],
"config": {
"include": [
Expand Down Expand Up @@ -182,8 +182,8 @@ Feature: Verify Enterprise Contract Tekton Tasks
"sources": [
{
"policy": [
"github.com/conforma/policy//policy/release?ref=release-v0.8",
"github.com/conforma/policy//policy/lib?ref=release-v0.8"
"github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a",
"github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"
],
"config": {
"include": [
Expand Down Expand Up @@ -356,8 +356,8 @@ Feature: Verify Enterprise Contract Tekton Tasks
"sources": [
{
"policy": [
"github.com/conforma/policy//policy/release?ref=release-v0.8",
"github.com/conforma/policy//policy/lib?ref=release-v0.8"
"github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a",
"github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"
],
"config": {
"include": [
Expand Down Expand Up @@ -389,8 +389,8 @@ Feature: Verify Enterprise Contract Tekton Tasks
"sources": [
{
"policy": [
"github.com/conforma/policy//policy/release?ref=release-v0.8",
"github.com/conforma/policy//policy/lib?ref=release-v0.8"
"github.com/conforma/policy//policy/release?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a",
"github.com/conforma/policy//policy/lib?ref=b1f08f104e7678a8f40ed792e40c0799c1198e7a"
],
"config": {
"include": [
Expand Down
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
module github.com/conforma/cli

go 1.26.4
go 1.26.7

require (
cuelang.org/go v0.16.0
Expand Down
2 changes: 1 addition & 1 deletion tools/go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
module github.com/conforma/cli/tools

go 1.26.4
go 1.26.7

require (
github.com/daixiang0/gci v0.13.7
Expand Down
2 changes: 1 addition & 1 deletion tools/kubectl/go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
module github.com/conforma/cli/tools/kubectl

go 1.26.4
go 1.26.7

require k8s.io/kubernetes v1.34.2

Expand Down