chore(deps): bump golang from 1.26.4-alpine to 1.27rc2-alpine (#1593)

Bumps golang from 1.26.4-alpine to 1.27rc2-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.27rc2-alpine
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This commit is contained in:
dependabot[bot]
2026-07-08 14:07:50 -04:00
committed by GitHub
parent 22512fd14b
commit 7bf663442b
+2 -2
View File
@@ -111,7 +111,7 @@ RUN if [ "$TARGETARCH" = "$BUILDARCH" ]; then \
# time rather than building fully offline.
# Base image pinned by digest so the Go toolchain that compiles the static
# Docker CLI binary cannot change without an explicit Dependabot bump.
FROM --platform=$BUILDPLATFORM golang:1.26.4-alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b993f6f615648 AS cli-builder
FROM --platform=$BUILDPLATFORM golang:1.27rc2-alpine@sha256:7870fdc211100210e7380f487953c4188fcbeac99646a56926a973161a3eedcd AS cli-builder
ARG TARGETARCH
@@ -170,7 +170,7 @@ RUN cp vendor.mod go.mod && cp vendor.sum go.sum && \
# so this is defense-in-depth rather than a live exposure.
# Base image pinned by digest (same image as cli-builder above) so both
# source builds share an identical, immutable Go toolchain.
FROM --platform=$BUILDPLATFORM golang:1.26.4-alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b993f6f615648 AS compose-builder
FROM --platform=$BUILDPLATFORM golang:1.27rc2-alpine@sha256:7870fdc211100210e7380f487953c4188fcbeac99646a56926a973161a3eedcd AS compose-builder
ARG TARGETARCH