Update dependency golang to v1.26.4 (main)

[red-hat-konflux]

This PR contains the following updates:

Package	Update	Change	Pending
golang	patch	1.26.3 → 1.26.4	1.26.5

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

golang/go (golang)

v1.26.4

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[fullsend-ai-review]

🤖 Review · ⚠️ Cancelled · Started 1:39 AM UTC · Ended 1:41 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Review · ⚠️ Cancelled · Started 1:45 AM UTC · Ended 1:48 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:51 AM UTC · Completed 1:58 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

Review — approve

PR: #3367 — Update dependency golang to v1.26.4 (main)

Summary

Routine patch version bump of Go toolchain from 1.26.3 to 1.26.4 in .tool-versions, generated by Renovate/MintMaker. The change is minimal (1 line changed) and safe.

Dimension results

Dimension	Result
Correctness	✅ No blocking findings (2 low — version skew)
Security	✅ No findings
Intent & Coherence	✅ Mechanical change — authorization implicit
Style & Conventions	✅ No findings — early exit (value-only change)
Documentation Currency	✅ No findings
Cross-repo Contracts	⏭ Skipped — no API surface modified

Findings

[low] Version inconsistency between .tool-versions and go.mod files

File: go.mod (line 3), also acceptance/go.mod, tools/go.mod, tools/kubectl/go.mod
Category: version inconsistency

The go directive in go.mod and its sub-module counterparts still specifies 1.26.3 while .tool-versions is being updated to 1.26.4. This creates a minor version skew between the local developer toolchain and the declared Go module version. For a patch-level bump this is unlikely to cause build failures, and Renovate typically manages go.mod updates via a separate PR.

[low] Version inconsistency between .tool-versions and Dockerfiles

File: Dockerfile (line 19), also Dockerfile.dist (line 19)
Category: version inconsistency

The Dockerfile build stages still use golang:1.26.3 / go-toolset:1.26.3 as base images. After this PR, the local toolchain (governed by .tool-versions) will be 1.26.4 while container builds use 1.26.3. These are likely updated via separate Renovate PRs for container image managers.

Verdict

Approve. This is a safe, routine Go patch version bump. The version skew with go.mod and Dockerfiles is expected behavior for Renovate's per-manager update strategy and poses no risk for a patch-level change.

Previous run

Looks good to me

Previous run (2)

Review

Findings

Medium

• [stale-reference] Dockerfile:19 — Dockerfile still uses golang:1.26.3 base image while .tool-versions is bumped to 1.26.4, creating version skew between local development (asdf/mise) and container builds.
  Remediation: Update the FROM line to golang:1.26.4, or have Renovate/Mintmaker handle Dockerfile updates in the same PR.

• [stale-reference] Dockerfile.dist:19 — Dockerfile.dist still pins go-toolset:1.26.3 (with digest). The Go toolchain version is now inconsistent with .tool-versions (1.26.4). The UBI image tag for 1.26.4 may not yet be available.
  Remediation: Update the tag to 1.26.4 with the correct digest once the UBI image is published.

Low

• [stale-reference] go.mod:3 — Root go.mod still declares go 1.26.3. The go directive is a minimum version floor, so this is cosmetic — Go 1.26.4 builds modules declaring go 1.26.3 without issue.
  Remediation: Run go mod tidy with Go 1.26.4.

• [stale-reference] tools/go.mod:3, tools/kubectl/go.mod:3, acceptance/go.mod:3 — All secondary go.mod files still declare go 1.26.3. Same cosmetic concern as root go.mod.
  Remediation: Update the go directive to 1.26.4 in each module.

---

Labels: Go toolchain patch version bump managed by renovate bot.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:44 AM UTC · Completed 1:48 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:49 AM UTC · Completed 1:55 AM UTC
Commit: 7c8ccca · View workflow run →