Skip to content

fix: bump Go Docker image to 1.26.3#2959

Merged
omer-topal merged 1 commit into
masterfrom
security/bump-go-1.26.3
May 20, 2026
Merged

fix: bump Go Docker image to 1.26.3#2959
omer-topal merged 1 commit into
masterfrom
security/bump-go-1.26.3

Conversation

@omer-topal
Copy link
Copy Markdown
Contributor

@omer-topal omer-topal commented May 20, 2026

Summary by CodeRabbit

  • Chores
    • Updated Go base image to version 1.26.3 across build configurations for improved stability and security patches
    • Increased Dependabot dependency check frequency from monthly to weekly for more timely vulnerability detection

Review Change Stack

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 20, 2026

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 83e8b232-649c-4deb-af2e-86f1491859c6

📥 Commits

Reviewing files that changed from the base of the PR and between 4ddb696 and 6b3905c.

📒 Files selected for processing (4)
  • .github/dependabot.yml
  • Dockerfile
  • Dockerfile.local
  • Dockerfile.release

📝 Walkthrough

Walkthrough

Go toolchain updated from 1.26.2-alpine to 1.26.3-alpine across all Dockerfiles (main build, local development, and release configurations). Dependabot refresh schedule changed from monthly to weekly to detect dependency updates more frequently.

Changes

Go Toolchain Version Bump and Dependency Configuration

Layer / File(s) Summary
Dependabot refresh schedule
.github/dependabot.yml
Dependabot schedule.interval changed from monthly to weekly for more frequent dependency checks.
Docker multi-stage builder base images
Dockerfile, Dockerfile.release
Go base image updated to golang:1.26.3-alpine in both permify-builder and health-probe-builder stages, and consistently applied across primary and release Dockerfiles.
Development container base image
Dockerfile.local
Go base image updated to golang:1.26.3-alpine; ENTRYPOINT re-asserted as ["air"] with no functional change.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

  • Permify/permify#2682: Both PRs update the Go Alpine base image in Docker multi-stage permify-builder and health-probe-builder stages by bumping toolchain versions.
  • Permify/permify#2334: Both PRs update Docker build inputs by switching pinned golang:<version>-alpine base image digests in Dockerfile and related configurations.
  • Permify/permify#2400: Both PRs modify the health-probe-builder stage by bumping the pinned Go base image digest used to build grpc-health-probe.

Poem

🐰 Go version hops up one dot more,
From 1.26.2 to .3 we explore!
Dockerfile lanes all in a line,
Dependabot checks every week—just fine! ✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely summarizes the main change: upgrading the Go Docker image version from 1.26.2 to 1.26.3 across multiple Dockerfile configurations.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch security/bump-go-1.26.3

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@codecov
Copy link
Copy Markdown

codecov Bot commented May 20, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 82.60%. Comparing base (4ddb696) to head (6b3905c).

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #2959      +/-   ##
==========================================
- Coverage   82.61%   82.60%   -0.01%     
==========================================
  Files          74       74              
  Lines        8300     8300              
==========================================
- Hits         6856     6855       -1     
  Misses        909      909              
- Partials      535      536       +1     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@omer-topal omer-topal merged commit 47c5915 into master May 20, 2026
15 checks passed
@github-actions github-actions Bot locked and limited conversation to collaborators May 20, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant