-
Notifications
You must be signed in to change notification settings - Fork 61
Update docker.io/library/golang Docker tag to v1.27.1 (main) #3555
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. Weβll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Changes from all commits
File filter
Filter by extension
Conversations
Jump to
Diff view
Diff view
There are no files selected for viewing
| Original file line number | Diff line number | Diff line change |
|---|---|---|
|
|
@@ -16,7 +16,7 @@ | |
|
|
||
| ## Build | ||
|
|
||
| FROM docker.io/library/golang:1.26.7@sha256:e30143be198ab04cf7ba25fba83ab3a692ca584c994aad0bf131fa0eb32dd8c1 AS build | ||
| FROM docker.io/library/golang:1.27.1@sha256:f44f6e88636cfb311f9ebace870ded69d943f227bb3cb27d32ffd84ea18c43ea AS build | ||
|
There was a problem hiding this comment. Choose a reason for hiding this commentThe reason will be displayed to describe this comment to others. Learn more. [low] protected-path PR modifies Dockerfile, which is in the REVIEW_PROTECTED_PATHS list. The repository has a renovate.json that extends the org-wide Renovate configuration and the PR author is app/renovate, so automated Docker base-image tag/digest bumps are within an established policy pattern. Human approval is still required for protected-path changes regardless of authorization context. |
||
|
|
||
| ARG TARGETOS | ||
| ARG TARGETARCH | ||
|
|
||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[medium] protected-path
PR modifies Dockerfile, which is in the review agents governance/infrastructure protected paths list (REVIEW_PROTECTED_PATHS). The change is a Renovate-generated Docker tag bump (docker.io/library/golang 1.26.7 -> 1.27.1) implicitly authorized by the repos renovate.json (which extends github>conforma/.github//config/renovate/renovate.json), and the requires-manual-review label is already present. Human approval is always required for protected-path changes regardless of context; the review agent will not auto-approve.