build: bump golang from 1.26.5-alpine3.23 to 1.27rc2-alpine3.23 in /gestaltd - #3095
build: bump golang from 1.26.5-alpine3.23 to 1.27rc2-alpine3.23 in /gestaltd#3095dependabot[bot] wants to merge 1 commit into
Conversation
Bumps golang from 1.26.5-alpine3.23 to 1.27rc2-alpine3.23. --- updated-dependencies: - dependency-name: golang dependency-version: 1.27rc2-alpine3.23 dependency-type: direct:production ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
dependabot
Bot
added
dependencies
PR SummaryCursor Bugbot is generating a summary for commit 62dc388. Configure here. |
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Want fixes drafted automatically? Bugbot Autofix can create code changes for findings. A team admin can enable Autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 62dc388. Configure here.
| ARG GESTALT_URL=https://hub.docker.com/r/valontechnologies/gestaltd | ||
|
|
||
| FROM --platform=$BUILDPLATFORM golang:1.26.5-alpine3.23@sha256:622e56dbc11a8cfe87cafa2331e9a201877271cbff918af53d3be315f3da88cc AS build-binary | ||
| FROM --platform=$BUILDPLATFORM golang:1.27rc2-alpine3.23@sha256:f12c2dc8d14504742f545658e8e49e09e545f2e396788b49797c8052f53434ba AS build-binary |
There was a problem hiding this comment.
Pre-release Go for production builds
High Severity
This Dependabot bump replaces stable golang:1.26.5-alpine3.23 with golang:1.27rc2-alpine3.23, a release candidate. The alpine CD path builds via the alpine target, which compiles in build-binary, while CI and go.mod still pin Go 1.26.5—so published alpine images can ship binaries built with an unreleased toolchain that tests never exercise. Go 1.27 is not stable yet; the current stable line is 1.26.x.
Reviewed by Cursor Bugbot for commit 62dc388. Configure here.
Bumps golang from 1.26.5-alpine3.23 to 1.27rc2-alpine3.23.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)