From 2d219828405001ee038d0e238e02292c50bd5b79 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Jul 2026 21:17:54 -0400 Subject: [PATCH] chore(deps): bump golang from `7870fdc` to `dcbb18c` (#1633) Bumps golang from `7870fdc` to `dcbb18c`. --- updated-dependencies: - dependency-name: golang dependency-version: 1.27rc2-alpine dependency-type: direct:production ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index d37fca38..e4f24a12 100644 --- a/Dockerfile +++ b/Dockerfile @@ -111,7 +111,7 @@ RUN if [ "$TARGETARCH" = "$BUILDARCH" ]; then \ # time rather than building fully offline. # Base image pinned by digest so the Go toolchain that compiles the static # Docker CLI binary cannot change without an explicit Dependabot bump. -FROM --platform=$BUILDPLATFORM golang:1.27rc2-alpine@sha256:7870fdc211100210e7380f487953c4188fcbeac99646a56926a973161a3eedcd AS cli-builder +FROM --platform=$BUILDPLATFORM golang:1.27rc2-alpine@sha256:dcbb18cc5fa1082364dc6aa95224b6b55429d09cbb9631a053d8064c1c367300 AS cli-builder ARG TARGETARCH @@ -170,7 +170,7 @@ RUN cp vendor.mod go.mod && cp vendor.sum go.sum && \ # so this is defense-in-depth rather than a live exposure. # Base image pinned by digest (same image as cli-builder above) so both # source builds share an identical, immutable Go toolchain. -FROM --platform=$BUILDPLATFORM golang:1.27rc2-alpine@sha256:7870fdc211100210e7380f487953c4188fcbeac99646a56926a973161a3eedcd AS compose-builder +FROM --platform=$BUILDPLATFORM golang:1.27rc2-alpine@sha256:dcbb18cc5fa1082364dc6aa95224b6b55429d09cbb9631a053d8064c1c367300 AS compose-builder ARG TARGETARCH