Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion Dockerfile.dist
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,7 @@

## Build

FROM registry.access.redhat.com/ubi9/go-toolset:1.26.3@sha256:17c888d75753f128f6cbdc5587932c3abd2632ca8e0931aa27b9a60c7a75ac62 AS build
FROM registry.access.redhat.com/ubi9/go-toolset:1.26.5-1787080706@sha256:71e89a1a51ab32cc30634d89ee4dc8ea40ad9991057fa1eae3b1af32bc7db73f AS build

Check failure on line 19 in Dockerfile.dist

View workflow job for this annotation

GitHub Actions / Test

Containerfile version incompatible, saw 1.26.5, running with version: 1.26.3

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

This PR modifies Dockerfile.dist, which falls under the protected path prefix "Dockerfile". Protected paths require human approval regardless of change content. The PR has no linked issue providing authorization for modifying governance/infrastructure files. The change itself β€” a Renovate-managed Docker tag bump for ubi9/go-toolset from 1.26.3 to 1.26.5-1787080706 with a pinned digest β€” is mechanically correct, but human review of protected infrastructure files is always required.

Suggested fix: A maintainer should review and approve this Dockerfile change. No code changes are needed β€” the version bump with pinned digest is correct.

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] protected-path

Dockerfile.dist matches the protected path prefix 'Dockerfile'. The PR does not link to an issue authorizing changes to governance or infrastructure files. While this is an automated Renovate dependency update (renovate.json configuration present, author is red-hat-konflux[bot], labels include 'renovate' and 'dependencies'), human approval is always required for protected-path changes.

Suggested fix: Ensure a human reviewer explicitly approves this protected-path change.


ARG TARGETOS
ARG TARGETARCH
Expand Down
Loading