Update docker.io/library/golang Docker tag to v1.26.10 (main) by red-hat-konflux[bot] · Pull Request #3372 · conforma/cli

red-hat-konflux · 2026-06-28T01:05:26Z

This PR contains the following updates:

Package	Type	Update	Change
docker.io/library/golang (source)	stage	patch	`1.26.7` → `1.26.10`

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM (* 0-3 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

fullsend-ai-review · 2026-06-28T01:08:38Z

🤖 Finished Review · ✅ Success · Started 1:08 AM UTC · Completed 1:15 AM UTC
Commit: 47d3320 · View workflow run →

fullsend-ai-review · 2026-06-28T01:15:26Z

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is a protected governance/infrastructure file. The PR has no linked issue providing justification for modifying this protected path. Human approval is required for all protected-path changes.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected path requiring human approval. The PR has no linked issue providing authorization for modifying governance or infrastructure files. Human review is required regardless of the change's nature.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (2)

Looks good to me

Previous run (3)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies a protected path (Dockerfile), which is a governance / infrastructure file requiring human approval. The PR description explains the rationale (automated Renovate patch bump of docker.io/library/golang from 1.26.7 to 1.26.10 with a pinned sha256 digest) and renovate.json authorizes this change pattern, but human approval is always required for protected-path changes regardless of context.

Previous run (4)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is in the protected paths list. The repository's renovate.json (extending github>conforma/.github//config/renovate/renovate.json) configures Renovate to perform routine dependency updates on this file, and the PR body documents the change (docker.io/library/golang 1.26.7 → 1.26.10 patch bump, with digest re-pinned). Human approval is still required for any protected-path change regardless of context.

Previous run (5)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is in the protected paths list. The repository's renovate.json (extending github>conforma/.github//config/renovate/renovate.json) authorizes Renovate to perform routine dependency updates on this file, and the PR body documents the change (docker.io/library/golang 1.26.7 → 1.26.9 patch bump, with digest re-pinned). Human approval is still required for any protected-path change regardless of context.

Previous run (6)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, a protected governance/infrastructure path. The PR has no linked issue justifying the change to a governance or infrastructure file, so human approval is required before merge.
Remediation: Link an authorizing issue (or point to the governing automation policy, e.g. renovate.json) that explicitly covers this change, and secure human reviewer approval before merge.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (7)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is on the protected paths list. The change is a Renovate-automated patch-version bump of the Golang build-stage base image (1.26.7 → 1.26.9) with the pinned SHA256 digest updated alongside the tag. The author is the configured dependency-automation bot and the PR body describes the change clearly, so the rationale is explicit; however, human approval is always required for protected-path changes regardless of context.

Previous run (8)

Review

Findings

High

[protected-path] Dockerfile — The PR modifies the protected path Dockerfile without a linked issue or an in-description rationale explaining why the governance/infrastructure file is being changed. The PR description is Renovate's default template (patch bump of the docker.io/library/golang base image from 1.26.7 to 1.26.9 with the matching SHA256 digest) and does not justify modifying a protected file. The repository's renovate.json configures automated updates for this file, but protected-path changes still require explicit human approval regardless of automation context.
Remediation: A human maintainer must review and approve this change. If this update should be exempt from protected-path review, document the carve-out in the PR body (and ideally in a tracked issue) so future automated bumps can cite it.

Info

[provenance-note] — Prior review context: app-verified with an empty prior-findings set; the compare API returned 404 for prior SHA 35a51f3, so the incremental diff fell back to the full PR diff and all changes were treated as unanchored. Risk assessment: level low (score 1) — single-line Go base image patch bump by Renovate following an established, frequently-exercised update pattern; minimal blast radius.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (9)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is listed in the active protected-paths list. The PR body explains the rationale (Renovate automated patch bump of docker.io/library/golang from 1.26.7 to 1.26.9) and the repository's renovate.json extends the organization-level Renovate config, which authorizes this update pattern. Human approval is nevertheless always required for protected-path changes, regardless of context.
Remediation: A human reviewer must approve this change to a protected path before merge.

Correctness, security, and style/conventions sub-agents returned no findings for this patch-level base-image bump. Digest format is valid (sha256 + 64 hex) and the tag 1.26.9 matches the surrounding digest-pinning pattern already used in the file.

Previous run (10)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, a governance-protected path per the review harness configuration. The repository has renovate.json and the PR author is red-hat-konflux[bot] (Renovate), so the change pattern (base-image patch bump with pinned sha256 digest) matches the automation the repo configures; however, the PR has no linked issue, so authorization is inferred solely from the automated workflow. Policy requires explicit human approval for every protected-path change regardless of the automation source.
Remediation: A human maintainer must review and approve this change. If repository policy intends to allow Renovate automerge for Dockerfile dependency bumps, either remove Dockerfile from REVIEW_PROTECTED_PATHS in the review harness configuration or add a documented Renovate-automation carve-out there.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (11)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies a governance/infrastructure file on the protected-paths list (Dockerfile) and has no linked issue justifying the change. Human approval is required for modifications under protected paths. The repository's renovate.json authorizes Renovate to open dependency-update PRs, but it does not waive the human-approval requirement for protected-path changes. The underlying content change itself is a mechanical patch bump — docker.io/library/golang:1.26.7 → 1.26.9 with a matching sha256 digest — and no correctness, security, style, or coherence findings were raised against it.
Remediation: A human reviewer should explicitly approve this patch bump before merge.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (12)

Looks good to me

Previous run (13)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies a protected governance/infrastructure path (Dockerfile) without a linked issue justifying the change. The PR description explains the mechanical nature of the patch bump (golang 1.26.7 → 1.26.8 with digest sha256:eb36c1664dd974cde625f736e02c204383deebe03977365caaec5bf49f794348) and the repository's renovate.json extends github>conforma/.github//config/renovate/renovate.json, which configures this automation. Per policy, protected-path changes require explicit human approval regardless of the renovate configuration.
Remediation: A human reviewer should verify the new digest matches the upstream docker.io/library/golang:1.26.8 tag and sign off on the merge manually.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (14)

Looks good to me

Previous run (15)

Looks good to me

Previous run (16)

Looks good to me

Previous run (17)

Looks good to me

Previous run (18)

Looks good to me

Previous run (19)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is on the review-agent protected-paths list. The description clearly explains the rationale (Renovate/MintMaker patch bump of docker.io/library/golang from 1.26.7 to 1.26.8 with a pinned SHA256 digest), so context is sufficient. Human approval is always required for protected-path changes, regardless of context.
Remediation: Have a human reviewer confirm the golang builder-stage patch bump before merge.

Previous run (20)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is listed in the repository's protected-paths list (governance/infrastructure files that require human review). The change itself is a mechanical patch-level bump of the docker.io/library/golang base image from 1.26.7 → 1.26.8 with a corresponding sha256 digest update, generated by the Renovate/Mintmaker bot and authorized by the repository's renovate.json (which extends github>conforma/.github//config/renovate/renovate.json). No code or logic changes; the digest remains properly pinned. Human approval is always required for protected-path changes, regardless of automated-authorization context. Remediation: verify the new tag+digest match the intended upstream golang:1.26.8 image and merge manually (or via the configured automerge policy).

Previous run (21)

Review

Findings

Medium

[protected-path] Dockerfile — The PR modifies Dockerfile, which is included in the repo's protected-path list (REVIEW_PROTECTED_PATHS) as a governance/infrastructure file. Human approval is always required for protected-path changes, regardless of context. See also: [scope-authorization-implicit] finding — authorization for this Renovate-driven Docker patch bump is inferred from the mechanical nature of the change and the repo's renovate.json (which extends github>conforma/.github//config/renovate/renovate.json).
Remediation: Confirm human review before merge. No code change required.

Info

[provenance-warning] — Prior review context discarded: PRIOR_REVIEW_PROVENANCE=unverifiable-wrong-app (the prior review comment could not be attributed to the expected app). Severity anchoring was skipped; this review treats all findings as first-time assessments.
[scope-authorization-implicit] N/A — Authorization inferred from the mechanical nature of the change (Docker base-image patch tag + digest bump from golang:1.26.7 to golang:1.26.8, digest re-pinned). No architectural review required.

Previous run (22)

Review

Mechanical Renovate/MintMaker patch bump of the golang build-stage image (1.26.7 → 1.26.8), pinned by SHA256 digest. Sub-agent review across correctness, security, intent-coherence, and style-conventions surfaced no functional issues. The only notes below are procedural: the change touches a protected path (Dockerfile), and human approval is required for protected-path modifications even when an automation policy explicitly authorizes the change pattern.

Findings

Info

[scope-authorization-implicit] Dockerfile:19 — Authorization inferred from the mechanical nature of the change (golang base image patch version bump 1.26.7 → 1.26.8). The repository contains renovate.json extending conforma/.github renovate config, which explicitly authorizes the Renovate/MintMaker bot to submit dependency-update PRs of this form.
[protected-path] Dockerfile — This PR modifies Dockerfile, which is on the protected-paths list. The PR has no linked issue, so explicit per-PR authorization context is limited. Note: the intent-coherence finding cites renovate.json as the authorization for this change pattern. Human approval is still required for protected-path changes, regardless of the automation policy.
[provenance-warning] — Prior review context was discarded because provenance validation failed (PRIOR_REVIEW_PROVENANCE=unverifiable-wrong-app). This review treats all findings as first-time assessments; severity anchoring was skipped for this run.

Previous run (23)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is in the repository's protected-paths list. The PR body provides sufficient context (Renovate/Mintmaker automated patch bump of docker.io/library/golang from 1.26.7 to 1.26.8 with a matching sha256 digest re-pin) and the repo's renovate.json authorizes automated Docker tag updates for this class of change. Human approval is nonetheless always required for protected-path changes, regardless of context.

Info

[scope-authorization-implicit] — Authorization inferred from the mechanical nature of the change (value-only Docker digest bump). No architectural review required.
[provenance-warning] — Prior review context discarded: provenance validation failed (unverifiable-wrong-app). This review treats all findings as first-time assessments; severity anchoring was skipped for this run.

Previous run (24)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is in the repository's protected-paths list. The PR description explains the change (MintMaker/Renovate automated patch bump of the golang stage base image from 1.26.7 to 1.26.8, with the corresponding sha256 digest updated in the same line), providing sufficient rationale. Human approval is always required for protected-path changes, regardless of automation source or how routine the update appears.

Previous run (25)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is on the repository's protected-paths list (governance / infrastructure). The change itself is a Renovate patch bump of the docker.io/library/golang base image from 1.26.7 (sha256:e30143be...) to 1.26.8 (sha256:3c3e25a4...), authored by the trusted red-hat-konflux bot with a clear description. Even so, human approval is always required for protected-path changes, regardless of automation source or apparent triviality.
Remediation: Human reviewer should confirm the new tag/digest pair (docker.io/library/golang:1.26.8@sha256:3c3e25a4da13fd0478eed2df1eb35a0e667094a7124d3993a6a1d30f71c17e79) corresponds to a legitimate upstream library/golang image before merging.

Previous run (26)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is on the repository's protected paths list. The change is a Renovate/MintMaker automated golang base-image patch bump (1.26.7 → 1.26.8) with the image digest re-pinned, but the PR has no linked issue explicitly authorizing modification of governance or infrastructure files. Per the protected-path policy, human approval is required.
Remediation: Link a tracking issue or repository policy document that authorizes automated Docker base-image bumps to modify Dockerfile, or defer to human maintainer review before merge.

Info

[provenance-warning] — Prior review context was discarded: provenance validation failed (unverifiable-wrong-app). This review treats all findings as first-time assessments; no severity anchoring was applied.
[risk-assessment] — Composite risk score: 1 (low). Trivial automated Renovate patch bump of the golang base image (1.26.7 → 1.26.8) with re-pinned digest, touching only the FROM directive.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (27)

Review

Findings

High

[protected-path] Dockerfile:19 — The Dockerfile is a protected governance/infrastructure file. This PR modifies it without a linked issue providing authorization for the change. While the change is a routine Go base image version bump (1.26.3 → 1.26.8) managed by Renovate with a digest pin, human approval is required for all protected-path changes.
Remediation: Obtain human reviewer approval for this Dockerfile change.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (28)

Review

Findings

Medium

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is a protected path requiring human approval. The change is a Renovate-managed golang base image patch version bump (1.26.3 → 1.26.7) with digest pinning. Human approval is always required for protected-path changes, regardless of context.

Previous run (29)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is a protected path. The PR has no linked issue providing justification for modifying infrastructure files. While the change is a standard Renovate-managed golang base image bump (1.26.3 → 1.26.7) with a pinned digest, human approval is always required for protected-path changes.
Remediation: A maintainer should verify this dependency update is expected and approve the protected-path change.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (30)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected path requiring human approval. The change is a Renovate-managed patch bump of the Go build-stage base image (golang:1.26.3 → golang:1.26.7) with a pinned digest. The PR description and labels (renovate, dependencies) provide sufficient context for the change rationale. Human approval is always required for protected-path changes, regardless of context.

Previous run (31)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is under a protected path. The PR has no linked issue providing authorization for the change. While this is an automated Renovate dependency update (golang 1.26.3 → 1.26.7 with pinned digest), human approval is required for all protected-path changes.
Remediation: Obtain human approval for the Dockerfile modification. Consider linking a tracking issue or ensuring the Renovate configuration explicitly authorizes Dockerfile updates.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (32)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies the Dockerfile, which is a protected governance/infrastructure file. The PR has no linked issue providing authorization for this change. While the PR description explains this is a Renovate-managed dependency update (golang 1.26.3 → 1.26.7), human approval is required for any modification to protected paths.
Remediation: A human reviewer must explicitly approve this change to a protected path.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (33)

Review

Findings

High

[protected-path] Dockerfile:20 — This PR modifies Dockerfile, which is a protected governance/infrastructure path. The PR has no linked issue providing authorization for the change. Human approval is required for all changes to protected paths.
Remediation: Ensure a human reviewer approves changes to the Dockerfile. Consider linking to an issue that authorizes this infrastructure change.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (34)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is a protected path requiring human approval. The PR has no linked issue providing explicit authorization for modifying governance/infrastructure files. The change itself is a straightforward Renovate-managed Go base image patch bump (1.26.3 → 1.26.6) with a pinned digest, and the diff is mechanically correct. However, protected-path changes always require human review and approval regardless of the change's nature or author.
Remediation: A human reviewer should verify the Go patch version bump is appropriate and approve the protected-path change.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (35)

Review

Findings

High

[protected-path] Dockerfile:19 — PR modifies Dockerfile, which is a protected path requiring human approval. The PR has no linked issue providing authorization for changes to governance/infrastructure files. While this is an automated Renovate bot update bumping the Go builder image tag from 1.26.3 to 1.26.6 (with a pinned digest), protected-path changes always require explicit human review regardless of the change mechanism.
Remediation: A human reviewer must explicitly approve changes to protected infrastructure files. No code changes are needed — this finding gates on human acknowledgment.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (36)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected governance/infrastructure file. The PR has no linked issue providing authorization for modifying protected files. Human approval is required for all protected-path changes.
Remediation: Link an authorizing issue or obtain explicit human approval for Dockerfile changes.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (37)

Review

Findings

High

[protected-path] Dockerfile:19 — Dockerfile is a protected path requiring human approval. This PR modifies the golang base image tag and digest (1.26.3 → 1.26.5). No linked issue provides authorization for this change to a governance/infrastructure file.
Remediation: A human reviewer must approve changes to protected paths. Verify the golang:1.26.5 image digest is correct and the version bump is intentional.

Low

[metadata mismatch] Dockerfile:19 — The PR title says "Update ... to v1.26.4" but the actual diff updates the Golang image tag from 1.26.3 to 1.26.5, skipping 1.26.4 entirely. The PR body's Renovate table also shows 1.26.3 → 1.26.4 with 1.26.5 listed as "Pending." This is standard Renovate batching behavior — the image reference with pinned digest is correct, but the title and body are stale.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (38)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected path requiring human approval. The PR has no linked issue providing justification for modifying governance or infrastructure files. While this is a Renovate-managed dependency update (golang 1.26.3 → 1.26.5 with pinned digest), human review and explicit approval is always required for protected-path changes.
Remediation: A maintainer must review and explicitly approve the Dockerfile change.

Low

[metadata inconsistency] Dockerfile:20 — The PR title references v1.26.4, but the actual diff updates the golang image from 1.26.3 to 1.26.5. The PR body lists the change as 1.26.3 → 1.26.4 with 1.26.5 as pending, yet the committed code already uses 1.26.5. This is likely due to Renovate rebasing onto a newer version after the PR was initially created.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (39)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected infrastructure file requiring human approval. The PR has no linked issue providing explicit authorization for this change. While the change is a mechanical Renovate dependency update (golang base image 1.26.3 → 1.26.5 with digest pin), human approval is always required for protected-path changes.
Remediation: A human maintainer should review and approve this Dockerfile change.

Low

[PR metadata / diff mismatch] Dockerfile:19 — The PR title references v1.26.4 but the diff updates the golang base image tag from 1.26.3 to 1.26.5. This is characteristic of Renovate bot rebasing the branch to a newer release after the PR was originally opened (the body already notes 1.26.5 as 'Pending'). The digest pin ensures build determinism. No code defect; cosmetic title staleness only.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (40)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected governance/infrastructure file requiring human approval. The PR has no linked issue providing authorization for this change. While the PR description explains this is an automated dependency update (golang base image 1.26.3 → 1.26.5 with pinned digest), human approval is required for all protected-path modifications.
Remediation: Ensure a human reviewer explicitly approves the Dockerfile change.

Low

[metadata inconsistency] Dockerfile:20 — The PR title says "Update ... to v1.26.4" but the actual diff bumps the image from golang:1.26.3 to golang:1.26.5, skipping 1.26.4 entirely. The PR body mentions "1.26.3 → 1.26.4, Pending: 1.26.5", confirming the title is stale relative to the committed change. This is a cosmetic mismatch typical of Renovate bot rebases but could cause confusion when triaging or auditing dependency updates.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (41)

Review

Findings

Medium

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected infrastructure file requiring human approval. The change is a Renovate-automated golang Docker image patch bump (1.26.3 → 1.26.4) with updated digest, and the PR description provides clear rationale. Human review is still required for all protected-path changes regardless of context.

Previous run (42)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected governance/infrastructure file requiring human approval. The PR has no linked issue providing authorization for changes to this protected path. While the change is a routine Renovate-generated patch-level bump of the Go builder image (1.26.3 → 1.26.4) with a pinned digest, human approval is always required for protected-path changes regardless of change scope.
Remediation: Obtain explicit human approval for this Dockerfile modification.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (43)

Review

Findings

High

[protected-path] Dockerfile — Dockerfile is a protected governance/infrastructure file that requires human approval for all changes, regardless of context. This automated Renovate PR updates the Go builder image from 1.26.3 to 1.26.4 (patch bump with pinned digest), but no linked issue provides explicit authorization for modifying protected paths. The change itself is mechanically sound — the tag and digest are updated consistently and digest pinning is maintained.
Remediation: A maintainer must review and approve this Dockerfile change. No code-level changes are needed.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (44)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected infrastructure file requiring human approval. The PR has no linked issue authorizing the change. While the PR description and labels identify this as a Renovate-managed golang base image update (1.26.3 → 1.26.5 with pinned digest), protected-path changes require explicit authorization via a linked issue regardless of the change nature.
Remediation: Ensure a human reviewer approves this protected-path change. Consider linking an issue or configuration reference that authorizes automated Dockerfile updates.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (45)

Review

Findings

High

[protected-path] Dockerfile:19 — Dockerfile is a protected governance/infrastructure file that always requires human approval. This PR modifies it but has no linked issue providing authorization. The change itself is a routine Renovate patch bump of the Go build image (1.26.3 → 1.26.5 with pinned digest), which is low-risk — but protected-path policy requires explicit human sign-off regardless of change nature.
Remediation: A human maintainer should review and approve this Dockerfile change. Consider linking a tracking issue or policy that authorizes automated Dockerfile updates to streamline future Renovate PRs.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (46)

Review

Findings

High

[protected-path] Dockerfile — Dockerfile is a protected path requiring human approval. This PR has no linked issue justifying the modification of governance/infrastructure files. While the change is a mechanical golang version bump (1.26.3 → 1.26.5) managed by Renovate/MintMaker, protected-path changes always require explicit human review regardless of the change nature.
Remediation: A maintainer should review and approve this Dockerfile change. Consider linking a tracking issue or policy document that authorizes automated Dockerfile updates via Renovate.

Next steps:

/fs-fix — agent addresses review findings automatically
/fs-fix <your instruction> — agent fixes with your specific guidance
Push commits directly — review re-runs automatically on push
/fs-fix-stop — disable automatic fix runs for this PR

Previous run (47)

Review

Findings

High

[protected-path] Dockerfile:19 — Dockerfile is a protected infrastructure path that requires human approval for any modifications. This PR modifies the golang builder image tag and digest (1.26.3 → 1.26.5) but has no linked issue providing explicit authorization for this change. While the change is an automated Renovate dependency update from red-hat-konflux[bot], human review and approval is always required for protected-path changes.
Remediation: A maintainer should review and approve this Dockerfile change.

Previous run (48)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is a protected infrastructure file requiring human approval. The PR has no linked issue providing explicit authorization for this change. While the PR description indicates this is an automated Renovate dependency update (golang 1.26.3 → 1.26.5 with updated digest pin), protected-path changes require issue-level authorization regardless of the change's nature.
Remediation: A human reviewer should explicitly approve this Dockerfile change. Consider linking a tracking issue that authorizes automated Dockerfile updates via Renovate.

Previous run (49)

Looks good to me — routine Golang base image patch bump (1.26.3 → 1.26.5) with pinned digest, generated by Renovate/MintMaker. No correctness, security, or style findings.

Previous run (50)

Review

No substantive findings. The Golang builder image bump from 1.26.3 to 1.26.5 with pinned digest is a routine dependency update.

Dockerfile is a protected path — human approval is required regardless of change complexity.

Previous run (51)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected path requiring human approval. The PR has no linked issue providing explicit authorization for changes to governance/infrastructure files. While the change is an automated Renovate dependency bump (golang 1.26.3 → 1.26.5 with pinned digest), human approval is always required for protected-path modifications.
Remediation: A human reviewer should approve this change directly. If this is a routine dependency update authorized by the repository's renovate.json configuration, a maintainer can approve without a linked issue.

Previous run (52)

Review

Findings

High

[protected-path] Dockerfile:19 — This PR modifies Dockerfile, which is a protected infrastructure file requiring human approval. The PR has no linked issue authorizing changes to protected paths. The change itself is a standard Renovate-managed Go image patch bump (1.26.3 → 1.26.4) with digest pinning preserved, and renovate.json in the repository root configures this automation — but human review is always required for protected-path changes regardless of automation context.
Remediation: A repository maintainer should review and approve this Dockerfile change.

Previous run (53)

Looks good to me

Previous run (54)

Review

Findings

High

[protected-path] Dockerfile — This PR modifies Dockerfile, which is a protected path requiring human approval. The PR has no linked issue providing explicit authorization for the change. This is a mechanical Renovate dependency bump (golang 1.26.3 → 1.26.4) with proper digest pinning — the change itself appears correct, but protected-path modifications always require human maintainer review regardless of the change's nature.
Remediation: A human maintainer should review and approve this Dockerfile change. No code changes are needed — the dependency bump itself is straightforward.

Previous run (55)

Review — Approve ✅

Patch version bump of the Go Docker base image (1.26.3 → 1.26.5) in the build stage of the Dockerfile.

Summary

This is a mechanical, Renovate-generated dependency update that bumps the Go builder image by two patch versions. The change is a single-line tag swap with no behavioral, API, or architectural impact.

Correctness: No logic, edge-case, or build risks introduced. The go.mod directive (go 1.26.3) specifies a minimum Go version; building with 1.26.5 satisfies it. Other files referencing 1.26.3 (.tool-versions, Dockerfile.dist, module files) remain valid — patch versions are backward-compatible and will be updated by their own Renovate PRs.

Security: No secrets, permissions, workflows, or auth-related files are modified. The mutable-tag pattern (:1.26.5 without a digest pin) is consistent with the pre-existing convention; no new risk is introduced by this PR.

Intent & coherence: Automated patch maintenance by Renovate bot — authorization is implicit in the mechanical nature of the change and the project's configured auto-merge policy.

Style & conventions: The new value follows the identical major.minor.patch tag pattern as the previous value. No style deviation.

Documentation: No user-facing documentation references the specific Go builder image version. No staleness introduced.

No findings above the severity threshold.

Previous run (56)

Review — ✅ Approve

PR: #3372 — Update docker.io/library/golang Docker tag to v1.26.4 (main)
Author: red-hat-konflux[bot] (Renovate / MintMaker)
Scope: 1 file changed, 1 addition, 1 deletion

Summary

Routine patch version bump of the Go build base image in the Dockerfile from golang:1.26.3 to golang:1.26.4. This is an automated dependency update created by the MintMaker/Renovate bot.

Analysis

Dimension	Result
Correctness	✅ Single-line tag bump in the build stage. Go patch versions are backward compatible. The `go.mod` directive (`go 1.26.3`) specifies minimum version and is fully compatible with the 1.26.4 toolchain.
Security	✅ Patch updates typically include bug and security fixes. Updating promptly is best practice.
Intent & coherence	✅ Standard automated dependency update. Well-scoped, single-purpose change.
Style & conventions	✅ Follows existing Dockerfile patterns. Tag-based reference is consistent with the build stage convention in this repo.
Documentation	✅ No documentation impact.
Cross-repo contracts	✅ No API, schema, or interface changes.

Findings

No findings.

Previous run (57)

Review — ✅ Approve

Scope: Automated patch version bump of Go Docker base image (1.26.3 → 1.26.5) in Dockerfile.

Summary

This is a single-line, automated Renovate/MintMaker dependency update that bumps the Go compiler Docker image tag from 1.26.3 to 1.26.5. Patch version updates deliver bug fixes and security patches with no breaking changes.

Analysis

Dimension	Assessment
Correctness	✅ Syntactically valid `FROM` instruction. `go.mod` specifies `go 1.26.3` as minimum — building with 1.26.5 is fully compatible.
Security	✅ Patch releases include security fixes. No new attack surface. Net-positive change.
Intent & coherence	✅ Standard automated dependency update from `red-hat-konflux[bot]`. Branch name, labels, and PR body all consistent.
Style / conventions	✅ No changes to code style. Maintains existing Dockerfile format.
Documentation	✅ No documentation updates needed for a base image tag bump.
Cross-repo contracts	✅ No API, schema, or interface changes.

No findings above the severity threshold.

Previous run (58)

Review — ✅ Approve

Scope: Automated patch version bump of the docker.io/library/golang Docker base image from 1.26.3 to 1.26.4 in Dockerfile.

Analysis

Dimension	Assessment
Correctness	Single-line base image tag bump. Go patch versions are backward compatible; building with Go 1.26.4 while `go.mod` specifies `go 1.26.3` is fully supported. No logic changes.
Security	Patch updates typically include security and bug fixes — this update is beneficial.
Intent & coherence	Properly scoped automated Renovate update. Other version references (`go.mod`, `.tool-versions`, `Dockerfile.dist`) use different package managers or images (`ubi9/go-toolset`) and are managed by separate Renovate rules. No consistency issue.
Style	Matches existing Dockerfile conventions (full `docker.io/library/` prefix, tag-only versioning).
Documentation	No documentation changes required.
Cross-repo contracts	Not applicable — no API or schema changes.

Notes

The Dockerfile is the only file referencing docker.io/library/golang — no other files were missed.
Dockerfile.dist uses a different base image (ubi9/go-toolset) with its own digest pin, managed separately.
The go.mod files specify the Go language version directive, not the Docker image version — these are independently managed and the slight version difference is expected and safe.

No findings. Safe to merge.

Previous run (59)

Review of #3372 — Update docker.io/library/golang Docker tag to v1.26.5

Verdict: ✅ Approve

Summary

This is an automated patch version bump of the Go Docker build image from 1.26.3 to 1.26.5, generated by MintMaker/Renovate. The change modifies a single line in the Dockerfile.

Dimensions reviewed

Dimension	Findings
Correctness	✅ No issues — patch bump is compatible with `go.mod` minimum version (`go 1.26.3 ≤ 1.26.5`)
Security	✅ No issues — no secrets, injection vectors, auth/permission changes
Intent & coherence	✅ Mechanical dependency update; authorization implicit
Style & conventions	✅ Change follows existing Dockerfile patterns
Documentation currency	✅ No documentation references the Go version
Cross-repo contracts	✅ No exported interfaces or API surfaces modified

Notes

The Go version in go.mod (1.26.3) is a minimum version directive and is compatible with the updated Docker image (1.26.5). Renovate typically updates these independently.
The build stage uses a tag without a digest pin, while the final stage (ubi9/ubi-minimal) is digest-pinned. This is a pre-existing pattern, not introduced by this PR.

Previous run (60)

Review

Outcome: Approve

This PR is an automated Renovate/MintMaker dependency update that bumps the Go build image in Dockerfile from golang:1.26.3 to golang:1.26.5 (patch version).

Dimensions evaluated

Dimension	Result
Correctness	✅ No concerns — patch bump is backward-compatible with `go.mod` `go 1.26.3` directive
Security	✅ No concerns — no secrets, injection vectors, or permission changes
Intent & coherence	✅ Mechanical dependency update, authorization implicit
Style & conventions	✅ Change follows existing Dockerfile patterns
Documentation currency	✅ No staleness — no new symbols, flags, or behavioral changes
Cross-repo contracts	⏭ Skipped — no exported interfaces modified

No findings at or above the reporting threshold.

Previous run (61)

Review

Outcome: Approve

Summary

Mechanical patch-version bump of the Go build image from golang:1.26.3 to golang:1.26.4 in Dockerfile, generated by MintMaker/Renovate. The change is a single-line value substitution that follows the existing pattern. No logic, security, API, or documentation concerns.

Findings

Severity	Category	File	Description
low	version-consistency	Dockerfile:19	The Dockerfile is bumped to `golang:1.26.4`, while `Dockerfile.dist` still uses `go-toolset:1.26.3`, and `go.mod` / `.tool-versions` also reference `1.26.3`. For a Go patch release this is benign — `go.mod`'s `go` directive is a minimum-version floor, and Renovate manages each dependency independently. No action needed on this PR; the other files will be updated by their own Renovate PRs.

Dimensions evaluated

Correctness: No logic, edge-case, or test-integrity concerns. The only observation is the expected cross-file version skew noted above.
Security: No secrets, injection patterns, permission changes, or supply-chain concerns introduced. The mutable tag (no digest pin) on the golang build image is a pre-existing pattern not introduced by this PR.
Intent & coherence: Mechanical dependency bump by an automated bot. Authorization is implicit from the change's nature.
Style & conventions: Value-only change follows existing Dockerfile pattern exactly.
Documentation currency: No documentation impact.
Cross-repo contracts: No exported interfaces or APIs modified.

Labels: PR already has appropriate labels (dependencies, docker, renovate); adding go label since this is a Go compiler version bump.

fullsend-ai-review · 2026-07-03T01:39:47Z

🤖 Finished Review · ✅ Success · Started 1:39 AM UTC · Completed 1:44 AM UTC
Commit: 47d3320 · View workflow run →

fullsend-ai-review · 2026-07-08T01:49:27Z

🤖 Finished Review · ✅ Success · Started 1:49 AM UTC · Completed 1:54 AM UTC
Commit: 7c8ccca · View workflow run →

Superseded by updated review

fullsend-ai-review · 2026-07-09T01:39:52Z

🤖 Finished Review · ✅ Success · Started 1:39 AM UTC · Completed 1:42 AM UTC
Commit: 8f05d87 · View workflow run →

fullsend-ai-review · 2026-07-10T01:33:36Z

🤖 Finished Review · ✅ Success · Started 1:33 AM UTC · Completed 1:38 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review · 2026-09-10T02:58:23Z

🤖 Finished Review · ✅ Success · Started 2:58 AM UTC · Completed 3:03 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $1.87

fullsend-ai-review · 2026-09-11T02:34:42Z

🤖 Finished Review · ✅ Success · Started 2:34 AM UTC · Completed 2:40 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $2.02

fullsend-ai-review · 2026-09-11T02:42:09Z

🤖 Finished Review · ✅ Success · Started 2:42 AM UTC · Completed 2:47 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $1.65

fullsend-ai-review · 2026-09-11T02:49:48Z

🤖 Finished Review · ✅ Success · Started 2:49 AM UTC · Completed 2:55 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $2.00

fullsend-ai-review · 2026-09-12T01:54:58Z

🤖 Finished Review · ✅ Success · Started 1:54 AM UTC · Completed 2:00 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $1.89

fullsend-ai-review · 2026-09-12T02:02:52Z

🤖 Finished Review · ✅ Success · Started 2:02 AM UTC · Completed 2:08 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $1.63

fullsend-ai-review · 2026-09-16T03:19:20Z

🤖 Finished Review · ✅ Success · Started 3:19 AM UTC · Completed 3:24 AM UTC

Commit: e8f0a9f · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $2.11

fullsend-ai-review · 2026-10-02T01:52:17Z

🤖 Finished Review · ❌ Failure (ensuring provider "vertex-ai": provider create "vertex-ai" failed: exit status 1 (output: Error: × code: 'Client specified an invalid argument', message: "provider │ credentials are not declared by pr…) · Started 1:52 AM UTC · Completed 1:52 AM UTC

Commit: 6f05d8b · View workflow run →

Effort: high

fullsend-ai-review · 2026-10-02T01:57:01Z

🤖 Finished Review · ❌ Failure (ensuring provider "vertex-ai": provider create "vertex-ai" failed: exit status 1 (output: Error: × code: 'Client specified an invalid argument', message: "provider │ credentials are not declared by pr…) · Started 1:56 AM UTC · Completed 1:57 AM UTC

Commit: e6cda02 · View workflow run →

Effort: high

fullsend-ai-review · 2026-10-02T02:02:32Z

🤖 Finished Review · ❌ Failure (ensuring provider "github-ro": provider create "github-ro" failed: exit status 1 (output: Error: × code: 'Client specified an invalid argument', message: "provider │ credentials are not declared by pr…) · Started 2:02 AM UTC · Completed 2:02 AM UTC

Commit: eb6b1c0 · View workflow run →

Effort: high

fullsend-ai-review · 2026-10-06T04:00:46Z

🤖 Finished Review · ❌ Failure (ensuring provider "vertex-ai": provider create "vertex-ai" failed: exit status 1 (output: Error: × code: 'Client specified an invalid argument', message: "provider │ credentials are not declared by pr…) · Started 4:00 AM UTC · Completed 4:00 AM UTC

Commit: 9a7e9de · View workflow run →

Effort: high

fullsend-ai-review · 2026-10-07T01:45:59Z

🤖 Finished Review · ❌ Failure (ensuring provider "vertex-ai": provider create "vertex-ai" failed: exit status 1 (output: Error: × code: 'Client specified an invalid argument', message: "provider │ credentials are not declared by pr…) · Started 1:45 AM UTC · Completed 1:45 AM UTC

Commit: 5fa9f31 · View workflow run →

Effort: high

fullsend-ai-review · 2026-10-08T02:01:21Z

🤖 Review · ⚠️ Cancelled · Ended 2:01 AM UTC

Commit: 3f61d81 · View workflow run →

fullsend-ai-review · 2026-10-09T02:52:36Z

🤖 Review · ⚠️ Cancelled · Ended 2:52 AM UTC

Commit: b1bc63f · View workflow run →

fullsend-ai-review · 2026-10-11T01:40:22Z

🤖 Review · ⚠️ Cancelled · Ended 1:40 AM UTC

Commit: e93d078 · View workflow run →

fullsend-ai-review · 2026-10-22T02:24:25Z

🤖 Review · ⚠️ Cancelled · Ended 2:24 AM UTC

Commit: 7a5d0cb · View workflow run →

fullsend-ai-review · 2026-10-23T02:44:05Z

🤖 Review · ⚠️ Cancelled · Ended 2:44 AM UTC

Commit: 95a67aa · View workflow run →

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

fullsend-ai-review

See the review comment for full details.

fullsend-ai-review · 2026-10-25T03:30:29Z

 ## Build

-FROM docker.io/library/golang:1.26.7@sha256:e30143be198ab04cf7ba25fba83ab3a692ca584c994aad0bf131fa0eb32dd8c1 AS build
+FROM docker.io/library/golang:1.26.10@sha256:672c944cfd07599b5f1bb179869270cdc94c6254e41db4d431259693cb286b82 AS build


[high] protected-path

This PR modifies Dockerfile, which is a protected governance/infrastructure file. The PR has no linked issue providing justification for modifying this protected path. Human approval is required for all protected-path changes.

red-hat-konflux Bot added main renovate labels Jun 28, 2026

red-hat-konflux Bot enabled auto-merge June 28, 2026 01:05

github-actions Bot added the size: XS label Jun 28, 2026

fullsend-ai-review Bot added requires-manual-review Review requires human judgment docker Pull requests that update Docker code dependencies Pull requests that update a dependency file labels Jun 28, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/docker.io-library-golang-1.26.x branch from 93943cb to 48696b2 Compare July 3, 2026 01:36

This comment was marked as outdated.

Sign in to view

fullsend-ai-review Bot removed the requires-manual-review Review requires human judgment label Jul 3, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/docker.io-library-golang-1.26.x branch 2 times, most recently from 9bcbd75 to 76d8bf9 Compare July 8, 2026 01:48

This comment was marked as outdated.

Sign in to view

fullsend-ai-review Bot added the requires-manual-review Review requires human judgment label Jul 8, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/docker.io-library-golang-1.26.x branch from 76d8bf9 to 275f5f9 Compare July 9, 2026 01:38

fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed requires-manual-review Review requires human judgment labels Jul 9, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/docker.io-library-golang-1.26.x branch from 275f5f9 to 224bb6b Compare July 10, 2026 01:32

This comment was marked as outdated.

Sign in to view

fullsend-ai-review Bot added requires-manual-review Review requires human judgment go Pull requests that update Go code and removed requires-manual-review Review requires human judgment labels Jul 10, 2026

fullsend-ai-review Bot mentioned this pull request Jul 11, 2026

Update dependency golang to v1.26.10 (main) #3367

Open

1 task

This comment was marked as outdated.

Sign in to view

Update docker.io/library/golang Docker tag to v1.26.10

010d4a8

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

fullsend-ai-review Bot suggested changes Oct 25, 2026

View reviewed changes

Conversation

red-hat-konflux Bot commented Jun 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Configuration

Documentation

Uh oh!

fullsend-ai-review Bot commented Jun 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

fullsend-ai-review Bot commented Jun 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review

Findings

High

Review

Findings

High

Review

Findings

Medium

Review

Findings

Medium

Review

Findings

Medium

Review

Findings

High

Review

Findings

Medium

Review

Findings

High

Info

Review

Findings

Medium

Review

Findings

High

Review

Findings

High

Review

Findings

High

Review

Findings

Medium

Review

Findings

Medium

Review

Findings

Medium

Info

Review

Findings

Info

Review

Findings

Medium

Info

Review

Findings

Medium

Review

Findings

Medium

Review

Findings

High

Info

Review

Findings

High

Review

Findings

red-hat-konflux Bot commented Jun 28, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jun 28, 2026 •

edited

Loading

fullsend-ai-review Bot commented Jun 28, 2026 •

edited

Loading