Update docker.io/library/golang Docker tag to v1.25.11 (main)

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
docker.io/library/golang	stage	patch	1.25.8 → 1.25.11

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[fullsend-ai-review]

Review

Findings

Low

• [stale-reference] Dockerfile.dist:19 — Dockerfile.dist uses a different Go base image (ubi9/go-toolset from registry.access.redhat.com) than the main Dockerfile (library/golang from docker.io). The go-toolset image is pinned by digest and follows Red Hat's own release cadence. These are independent dependencies that Renovate would track separately. The underlying Go compiler version should ideally be consistent across build paths.
  Remediation: Verify that ubi9/go-toolset:1.25.11 exists in the Red Hat registry before updating. If it does, update Dockerfile.dist in a separate PR (Renovate may do this automatically).

• [stale-reference] .tool-versions:1 — The .tool-versions file pins golang 1.25.8 while the main Dockerfile moves to 1.25.11. This controls local development tooling (asdf/mise) and may cause minor local/CI discrepancies.
  Remediation: Update .tool-versions to golang 1.25.11 to match the Dockerfile.

Info

• [sub-agent-failure] — The style-conventions sub-agent did not return findings due to model unavailability. For this trivial version-bump PR, style findings are not expected.

Previous run

Looks good to me

Previous run (2)

Review

Findings

Info

• [sub-agent-failure] N/A — The style-conventions sub-agent did not return findings: model unavailable on deployment. This dimension was not evaluated; however, as a mechanical version bump (Docker tag 1.25.8 → 1.25.10), no style concerns are expected.

Previous run (3)

Review

Findings

Low

• [stale-reference] .tool-versions:1 — .tool-versions still references golang 1.25.8 while the Dockerfile moves to 1.25.10. This may cause local development environments to use a slightly older patch version than CI.
  Remediation: Update .tool-versions to golang 1.25.10 in this PR or a follow-up.

• [stale-reference] go.mod:3 — go.mod specifies go 1.25.8 while the Dockerfile moves to 1.25.10. The go directive is a minimum version floor (not a pin), so Go 1.25.10 satisfies it — no functional mismatch exists.
  Remediation: Optionally update go.mod to go 1.25.10, but this is not required for correctness.

Info

• [stale-reference] tools/go.mod:3, tools/kubectl/go.mod:3, acceptance/go.mod:3 — Sub-module go.mod files still reference go 1.25.8. Same rationale as the root go.mod — the directive is a minimum version and is satisfied by 1.25.10.

• [stale-reference] Dockerfile.dist:19 — Uses ubi9/go-toolset:1.25.8 pinned by digest. This is a different base image (Red Hat UBI) managed on a separate release cadence from the upstream golang image. Renovate likely manages this dependency separately.

• [sub-agent-failure] The style-conventions sub-agent did not return findings due to model unavailability. Given the trivial nature of this change (single-line version bump), this gap has no practical impact.

Previous run (4)

Review

Findings

Low

• [stale-reference] Dockerfile.dist:19 — Dockerfile.dist still references go-toolset:1.25.8 while this PR updates the main Dockerfile to golang:1.25.11. These are different base images (docker.io/library/golang vs registry.access.redhat.com/ubi9/go-toolset), so the tag namespaces differ and this may be intentional, but it is worth verifying that the Red Hat go-toolset image is updated separately.

• [stale-reference] .tool-versions:1 — .tool-versions still specifies golang 1.25.8. Local developer tooling will use a different Go version than the CI Docker build (1.25.11). If the version bump matters for correctness or reproducibility, .tool-versions should be updated in a coordinated change.

Info

• [sub-agent-failure] — The style-conventions sub-agent did not return findings: model claude-sonnet-4-5@20250929 is not available on the deployment. This dimension was not evaluated. Given the trivial nature of this change (single-line version bump), this gap does not affect the review outcome.

Previous run (5)

Review

Findings

Info

• [supply chain] Dockerfile:19 — The build-stage base image (golang:1.25.11) is referenced by tag only, without a sha256 digest pin. The final-stage base image already uses a digest pin. This is a pre-existing condition, not introduced by this PR.

No issues found with this change. This is a straightforward automated patch-version bump of the Go build image from 1.25.8 to 1.25.11, generated by Renovate.

Previous run (6)

Review

Findings

No findings.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 12:56 AM UTC · Completed 1:00 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:49 AM UTC · Completed 1:54 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:20 AM UTC · Completed 1:24 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:37 AM UTC · Completed 2:43 AM UTC
Commit: 47d3320 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:47 AM UTC · Completed 1:51 AM UTC
Commit: 47d3320 · View workflow run →