[cchu-ld]

Prepares the 2.3.4 release, same approach as 2.3.3 in #256.

Ships the Go 1.26.10 toolchain and golang:1.26.10-alpine builder pin from #258, so crypto/x509 rejects chains through the distrusted eMudhra intermediates (INC-289, golang/go#82345). No code changes: only the version constant, the changelog and the dockerImage pins.

Users on @v2 get this once v2 moves to v2.3.4; GitHub builds the root Action from the Dockerfile on each run.

The docker/ entry point is still unaffected by this release: Publish Docker image has failed on every run, and launchdarkly/find-code-references-in-pull-request does not exist on Docker Hub. The release notes should keep the 2.3.3 caveat.

Release steps after merge: Releasing the Code References tools.

via LD Research 🤖

🤖 Generated with Claude Code

---

Note

Overview
Prepares release 2.3.4 by bumping internal/version.Version and aligning user-facing image pins from 2.3.3 to 2.3.4 in README.md and the docker/ Action’s default dockerImage.

The new 2.3.4 changelog entry documents that the release builds on Go 1.26.10 (toolchain and golang: builder) so crypto/x509 rejects chains through distrusted eMudhra intermediates (INC-289); this PR’s diff has no application or go.mod/Dockerfile edits—only version, changelog, and documentation pins.

^{Reviewed by Cursor Bugbot for commit 3b64368. Bugbot is set up for automated code reviews on this repo. Configure here.}