ci: update for go 1.26

[james-d-elliott]

Summary by CodeRabbit

Release Notes

• Chores

  • Migrated dependency management from Dependabot to Renovate with enhanced automation settings.
  • Updated CI configuration to support Go 1.26.

• Documentation

  • Updated minimum required Go version to 1.24+ in README.

[coderabbitai]

📝 Walkthrough

Walkthrough

Removes Dependabot configuration and automation workflow while expanding Renovate configuration to manage GitHub Actions dependencies with automerge rules. Go version targets updated from 1.25 to 1.26 across CI matrix and documentation.

Changes

Cohort / File(s)	Summary
Dependabot Removal .github/dependabot.yml, .github/workflows/dependabot.yml	Deleted Dependabot configuration and auto-merge workflow, eliminating automatic GitHub Actions dependency management and scheduled scans.
Go Version Updates .github/workflows/go.yml, README.md	Updated Go toolchain version from 1.25 to 1.26 in CI matrix and added 1.26 to test coverage; updated minimum version requirement in documentation.
Renovate Configuration Expansion .renovaterc	Extended Renovate to manage github-actions, added global settings (rebaseWhen, prConcurrentLimit, prHourlyLimit), and introduced new package rules for automerge on go datasource updates with digest/minor/patch types.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related issues

• Dependency Dashboard #7: Renovate configuration and Go version management changes directly address dependency tracking and version constraint updates in the Dependency Dashboard.

Possibly related PRs

• ci: update pipelines #190: Modifies the same CI and dependency workflow files (.github/workflows/dependabot.yml and .github/workflows/go.yml) with overlapping Go version targets.
• ci: only use dependabot for actions #56: Changes .github/dependabot.yml configuration for Go module dependency management.
• build(deps): update module github.com/go-crypt/x to v0.4.8 #203: Updates repository Go version configuration across CI matrix and documentation files.

Poem

🐰 Dependabot departs with grace,
Renovate takes its place!
Go 1.26 shines so bright,
Automerge flows with delight,
Hopping forward, versions unite! 🚀

🚥 Pre-merge checks | ✅ 4

✅ Passed checks (4 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'ci: update for go 1.26' accurately summarizes the primary objective of updating Go toolchain to version 1.26, which is reflected across the CI configuration changes.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Merge Conflict Detection	✅ Passed	✅ No merge conflicts detected when merging into master

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch ci-go126

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This PR aims to update the Go version requirements and CI configuration for the project, but contains critical version inconsistencies. The PR title indicates an update to Go 1.26, but the README.md changes show Go 1.24+, and Go 1.26 does not exist as of February 2026. The PR also migrates dependency management from Dependabot to Renovate with expanded configuration options including GitHub Actions management and automerge settings.

Changes:

• Updates Go version references across README.md, .renovaterc, and GitHub workflows (inconsistently between 1.24 and 1.26)
• Expands Renovate configuration with GitHub Actions management, automerge rules, and package-specific labels
• Removes Dependabot configuration files (.github/dependabot.yml and .github/workflows/dependabot.yml)

Reviewed changes

Copilot reviewed 5 out of 5 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
README.md	Updates minimum Go version requirement from 1.23+ to 1.24+
.renovaterc	Updates Go constraint to 1.26 (non-existent version) and adds extensive configuration for automerge, labels, and GitHub Actions management
.github/workflows/go.yml	Updates coverage job Go version to 1.26 and adds 1.26 to test matrix (both non-existent versions)
.github/workflows/dependabot.yml	Removes entire Dependabot auto-merge workflow
.github/dependabot.yml	Removes entire Dependabot configuration file

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[coderabbitai]

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

README.md (1)

6-6: ⚠️ Potential issue | 🟡 Minor

Go version badge still shows 1.25.

The badge wasn't updated to reflect the new Go 1.26 target. Since the CI and Renovate config now target 1.26, this badge should be updated to match.

Proposed fix

-![Go version](https://img.shields.io/badge/Go-1.25-brightgreen.svg)
+![Go version](https://img.shields.io/badge/Go-1.26-brightgreen.svg)

🧹 Nitpick comments (1)

.renovaterc (1)

39-48: Automerge rule applies to all managed datasources, not just Go.

The second package rule matches digest, minor, and patch updates without a matchDatasources or matchManagers filter, so it will automerge both Go module updates and GitHub Actions updates. If this is intentional (likely, given the removal of Dependabot), no action needed — just flagging for awareness.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 1.26%. Comparing base (719756f) to head (5f9f683).
⚠️ Report is 1 commits behind head on master.

Additional details and impacted files

@@          Coverage Diff           @@
##           master    #256   +/-   ##
======================================
  Coverage    1.26%   1.26%           
======================================
  Files          49      49           
  Lines        2206    2206           
======================================
  Hits           28      28           
  Misses       2160    2160           
  Partials       18      18           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.