chore(deps): Upgrade golang to 1.26.4 (v0.7)

[simonbaird]

No description provided.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Enterprise

Run ID: c78058a7-11f9-4566-a09e-4b6dae143770

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands.}

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 6:07 PM UTC · Completed 6:11 PM UTC
Commit: 87c4a29 · View workflow run →

[fullsend-ai-review]

Review — ✅ Approve

PR: chore(deps): Upgrade golang to 1.26.4 (v0.7)
Author: simonbaird · Base: release-v0.7

Summary

Mechanical Go toolchain bump from 1.26.3 → 1.26.4 across all version-pinning locations. The change is complete and internally consistent.

Completeness check

All 7 files in the repository that reference the Go version are updated:

File	Change
.tool-versions	golang 1.26.3 → 1.26.4
Dockerfile	golang:1.26.3 → golang:1.26.4
Dockerfile.dist	go-toolset:1.26.3@sha256:... → go-toolset:1.26.4@sha256:... (tag + digest)
go.mod	go 1.26.3 → go 1.26.4
acceptance/go.mod	go 1.26.3 → go 1.26.4
tools/go.mod	go 1.26.3 → go 1.26.4
tools/kubectl/go.mod	go 1.26.3 → go 1.26.4

A grep for 1.26.3 across the repo confirms no references were missed. The Dockerfile.dist correctly updates both the image tag and the pinned @sha256: digest. No go.sum changes are expected for a Go patch-level bump with no dependency graph changes.

Findings

No issues found. The change is a straightforward, consistent version bump with no logic, configuration, or behavioral changes.

---

Protected paths detected — this PR modifies files under one or more
protected paths. The review agent cannot approve PRs that touch these paths.
A human reviewer must approve this PR.

Protected files in this PR:

• Dockerfile
• Dockerfile.dist

Previous run

Review — Approve ✅

PR: #3414 — chore(deps): Upgrade golang to 1.26.4 (v0.7)
Scope: Mechanical Go version bump from 1.26.3 → 1.26.4

Summary

Clean, mechanical dependency update. All Go version references are updated consistently:

File	Change
.tool-versions	golang 1.26.3 → 1.26.4
Dockerfile	golang:1.26.3 → golang:1.26.4
Dockerfile.dist	Tag + digest updated (go-toolset:1.26.4@sha256:9748bb...)
go.mod	go 1.26.3 → go 1.26.4
acceptance/go.mod	go 1.26.3 → go 1.26.4
tools/go.mod	go 1.26.3 → go 1.26.4
tools/kubectl/go.mod	go 1.26.3 → go 1.26.4

Findings

No findings above threshold.

Checks

• ✅ Completeness — All 4 go.mod files and both Dockerfiles updated. No other files in the repo reference the old version.
• ✅ Digest pinning — Dockerfile.dist correctly updates both the version tag and the image digest hash.
• ✅ Documentation — No documentation files reference the specific Go version; no staleness introduced.
• ✅ Security — No secrets, permission changes, or injection patterns. Digest pinning preserved.
• ✅ Cross-repo contracts — No exported APIs or schemas modified.

---

Protected paths detected — this PR modifies files under one or more
protected paths. The review agent cannot approve PRs that touch these paths.
A human reviewer must approve this PR.

Protected files in this PR:

• Dockerfile
• Dockerfile.dist

Previous run (2)

Review — ✅ Approve

PR: chore(deps): Upgrade golang to 1.26.4 (v0.7)

Summary

Clean, complete Go toolchain version bump from 1.26.3 → 1.26.4 targeting the release-v0.7 branch. All 7 files that reference the Go version are updated consistently:

File	Change
.tool-versions	golang 1.26.3 → 1.26.4
Dockerfile	golang:1.26.3 → golang:1.26.4
Dockerfile.dist	go-toolset:1.26.3@sha256:17c8... → go-toolset:1.26.4@sha256:9748...
go.mod	go 1.26.3 → go 1.26.4
acceptance/go.mod	go 1.26.3 → go 1.26.4
tools/go.mod	go 1.26.3 → go 1.26.4
tools/kubectl/go.mod	go 1.26.3 → go 1.26.4

Verification

• Completeness: No remaining references to 1.26.3 exist outside the changed files. All 4 go.mod files in the repository are covered.
• Dockerfile.dist digest: The @sha256: digest is correctly updated alongside the tag — image pinning is preserved.
• CI workflows: All GitHub Actions workflows use go-version-file: go.mod to source the Go version dynamically, so no workflow changes are needed.
• No go.sum changes: Expected for a patch-level go directive bump that doesn't alter dependency resolution.

No findings.

---

Protected paths detected — this PR modifies files under one or more
protected paths. The review agent cannot approve PRs that touch these paths.
A human reviewer must approve this PR.

Protected files in this PR:

• Dockerfile
• Dockerfile.dist

---

Labels: Go toolchain version bump across go.mod files and Dockerfiles

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 8:57 PM UTC · Completed 9:01 PM UTC
Commit: 87c4a29 · View workflow run →

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
generative	69.55% <ø> (ø)
integration	69.55% <ø> (ø)
unit	69.55% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[fullsend-ai-review]

🤖 Review · ❌ Terminated · Started 6:39 PM UTC · Ended 6:42 PM UTC
Commit: 87c4a29 · View workflow run →

[simonbaird]

Saw an acceptance test failure. I'm guessing it was a spurious thing, so hoping a rerun will get this green.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 6:39 PM UTC · Completed 6:42 PM UTC
Commit: 87c4a29 · View workflow run →