From 7bf663442b79137a59165bc39c41f4e2129b00f9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 8 Jul 2026 14:07:50 -0400 Subject: [PATCH] chore(deps): bump golang from 1.26.4-alpine to 1.27rc2-alpine (#1593) Bumps golang from 1.26.4-alpine to 1.27rc2-alpine. --- updated-dependencies: - dependency-name: golang dependency-version: 1.27rc2-alpine dependency-type: direct:production ... Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- Dockerfile | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 25d8638f..d37fca38 100644 --- a/Dockerfile +++ b/Dockerfile @@ -111,7 +111,7 @@ RUN if [ "$TARGETARCH" = "$BUILDARCH" ]; then \ # time rather than building fully offline. # Base image pinned by digest so the Go toolchain that compiles the static # Docker CLI binary cannot change without an explicit Dependabot bump. -FROM --platform=$BUILDPLATFORM golang:1.26.4-alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b993f6f615648 AS cli-builder +FROM --platform=$BUILDPLATFORM golang:1.27rc2-alpine@sha256:7870fdc211100210e7380f487953c4188fcbeac99646a56926a973161a3eedcd AS cli-builder ARG TARGETARCH @@ -170,7 +170,7 @@ RUN cp vendor.mod go.mod && cp vendor.sum go.sum && \ # so this is defense-in-depth rather than a live exposure. # Base image pinned by digest (same image as cli-builder above) so both # source builds share an identical, immutable Go toolchain. -FROM --platform=$BUILDPLATFORM golang:1.26.4-alpine@sha256:3ad57304ad93bbec8548a0437ad9e06a455660655d9af011d58b993f6f615648 AS compose-builder +FROM --platform=$BUILDPLATFORM golang:1.27rc2-alpine@sha256:7870fdc211100210e7380f487953c4188fcbeac99646a56926a973161a3eedcd AS compose-builder ARG TARGETARCH