Skip to content

chore(deps): bump golang from 1.26-alpine to 1.27-alpine in the docker-minor-patch group across 1 directory - #1033

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/docker/docker-minor-patch-3f16df9430
Open

dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/docker/docker-minor-patch-3f16df9430

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps the docker-minor-patch group with 1 update in the / directory: golang.

Updates golang from 1.26-alpine to 1.27-alpine

@dependabot dependabot Bot added dependencies Dependency updates no-changeset PR intentionally exempt from the changeset requirement (dev tooling / non-shipping) labels Aug 31, 2026
cursor[bot]
cursor Bot previously approved these changes Aug 31, 2026

@cursor cursor Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Approved. Cursor Bugbot was not present after the first check poll, and the remaining signals plus the Dockerfile golang 1.26-alpine → 1.27-alpine bump do not require human review. No reviewers were assigned.

Open in Web View Automation 

Sent by Cursor Approval Agent: Pull Request Router and Approver

@miravoss26 miravoss26 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependency bump, reviewed. Bumps the Go builder base image from golang:1.26-alpine to golang:1.27-alpine in both Dockerfile and Dockerfile.updater — builder stage only, nothing else touched.

  • No logic changes, no new deps, no secrets/injection surface.
  • CI green across the board: core (Go) build, full stack, go test + vet, Cursor security agent all pass.

Safe to merge from my read. srcfl/ftw isn't on my merge allowlist (POLICY.md), so I'm not actioning this myself — over to a human or dependabot auto-merge.

@dependabot dependabot Bot changed the title chore(deps): bump golang from 1.26-alpine to 1.27-alpine in the docker-minor-patch group chore(deps): bump golang from 1.26-alpine to 1.27-alpine in the docker-minor-patch group across 1 directory Sep 7, 2026
@dependabot
dependabot Bot force-pushed the dependabot/docker/docker-minor-patch-3f16df9430 branch 5 times, most recently from d9b5b4d to bac69ab Compare September 7, 2026 10:25
@cursor
cursor Bot dismissed their stale review September 7, 2026 10:26

Dismissed the prior approval: APPROVAL_POLICY.md does not authorise auto-approving this PR. Cursor Bugbot was not present after the first check poll; no reviewers were assigned because the Dockerfiles are not a CODEOWNERS path.

@miravoss26 miravoss26 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trivial base-image bump: golang 1.26-alpine → 1.27-alpine in both Dockerfile and Dockerfile.updater. No logic changes, no new deps, no secrets/injection/authz surface. All relevant CI checks green (build-adjacent checks show SKIPPED, expected for a Dockerfile-only diff with no touched Go/web/driver paths).

Safe to merge from my read.

@dependabot
dependabot Bot force-pushed the dependabot/docker/docker-minor-patch-3f16df9430 branch from bac69ab to f7da40a Compare September 8, 2026 08:24

@miravoss26 miravoss26 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot: bumps the Go builder base image from golang:1.26 to 1.27 (bookworm variant in Dockerfile, alpine variant in Dockerfile.updater). No source changes, no new dependencies, no secrets. CI is fully green including the Cursor security agent.

Safe to merge from my read.

@miravoss26 miravoss26 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot minor bump, golang 1.26 → 1.27 (alpine) in the builder stage for both Dockerfile and Dockerfile.updater. No source changes, CI green on both.

Safe to merge from my read.

@dependabot
dependabot Bot force-pushed the dependabot/docker/docker-minor-patch-3f16df9430 branch from f7da40a to aa5f7fc Compare September 12, 2026 13:51

@miravoss26 miravoss26 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Dependabot bump, golang 1.26 → 1.27 in both Dockerfiles (builder + updater). No code changes, no new deps introduced, base-image version only. All CI green (core, full stack, driver contract). Safe to merge from my read.

@dependabot
dependabot Bot force-pushed the dependabot/docker/docker-minor-patch-3f16df9430 branch from aa5f7fc to 6782110 Compare September 14, 2026 04:13
Bumps the docker-minor-patch group with 1 update in the / directory: golang.


Updates `golang` from 1.26-alpine to 1.27-alpine

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.27-alpine
  dependency-type: direct:production
  dependency-group: docker-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/docker/docker-minor-patch-3f16df9430 branch from 6782110 to c5a42ee Compare September 14, 2026 10:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependency updates no-changeset PR intentionally exempt from the changeset requirement (dev tooling / non-shipping)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant