chore(deps): bump ubi9/go-toolset from 1787080752 to 1787774847

[dependabot]

Warning

Cooldown could not be applied because no publication date was available from the registry.

Bumps ubi9/go-toolset from 1787080752 to 1787774847.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated the build environment to use a newer Go toolset image for improved build reliability and consistency.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign makdaam for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift-online/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 9003ab24-df9f-49cf-ae25-9de529c6116a

📥 Commits

Reviewing files that changed from the base of the PR and between 82b3f74 and 545a3df.

📒 Files selected for processing (1)

• Dockerfile

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

Walkthrough

The Docker build stage now uses the pinned UBI9 Go toolset image tag 1787774847 instead of 1787080752.

Changes

Builder image update

Layer / File(s)	Summary
Update pinned Go toolset image Dockerfile	The builder stage uses Go toolset tag 1787774847 instead of 1787080752.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 545a3

This PR makes a localized container dependency version update; no actionable merge-blocking risk remains beyond normal checks and review.

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the dependency update from ubi9/go-toolset version 1787080752 to 1787774847.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto	✅ Passed	PASS: The pull request changes only the Dockerfile base image tag from 1787080752 to 1787774847. The diff adds no MD5, SHA-1, DES, RC4, Blowfish, ECB, custom crypto, or secret-comparison code. The…
Container-Privileges	✅ Passed	PASS. The PR changes only the builder image tag in Dockerfile. It does not add privileged mode, host namespace settings, SYS_ADMIN, or allowPrivilegeEscalation. The existing build-stage `USER ro…
No-Sensitive-Data-In-Logs	✅ Passed	PASS: The pull request changes only the Dockerfile base image tag from ubi9/go-toolset:1787080752 to ubi9/go-toolset:1787774847. The diff introduces no logging statement or sensitive-data output, …
No-Hardcoded-Secrets	✅ Passed	The pull request changes only the Dockerfile base image tag from 1787080752 to 1787774847. The added line contains a public registry image reference and no API key, token, password, private key, c…
No-Injection-Vectors	✅ Passed	PASS: The pull request changes only the pinned ubi9/go-toolset image tag in Dockerfile. The diff adds no SQL concatenation, shell=True with user input, eval/exec, pickle.loads, unsafe `yam…
Ai-Attribution	✅ Passed	The pull request adds one Dependabot commit. Its message has no AI-tool mention, Co-Authored-By, Assisted-by, or Generated-by trailer. The patch only changes the Dockerfile image tag. A `Co-Auth…

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: No-Weak-Crypto

Explanation

PASS: The pull request changes only the Dockerfile base image tag from 1787080752 to 1787774847. The diff adds no MD5, SHA-1, DES, RC4, Blowfish, ECB, custom crypto, or secret-comparison code. The repository contains an existing SHA-1 thumbprint implementation, but its blob is identical in the parent and current revisions, so this pull request does not introduce or change that usage.

Full details: Container-Privileges

Explanation

PASS. The PR changes only the builder image tag in Dockerfile. It does not add privileged mode, host namespace settings, SYS_ADMIN, or allowPrivilegeEscalation. The existing build-stage USER root has an adjacent setup comment, and the runtime stage explicitly uses USER 1001. The docker-compose.localstack.yaml root and privileged: true settings are unchanged and are not caused by this PR.

Full details: No-Sensitive-Data-In-Logs

Explanation

PASS: The pull request changes only the Dockerfile base image tag from ubi9/go-toolset:1787080752 to ubi9/go-toolset:1787774847. The diff introduces no logging statement or sensitive-data output, and no source files changed.

Full details: No-Hardcoded-Secrets

Explanation

The pull request changes only the Dockerfile base image tag from 1787080752 to 1787774847. The added line contains a public registry image reference and no API key, token, password, private key, credential, embedded URL credentials, or base64 secret. No explicit hardcoded-secret condition is introduced.

Full details: No-Injection-Vectors

Explanation

PASS: The pull request changes only the pinned ubi9/go-toolset image tag in Dockerfile. The diff adds no SQL concatenation, shell=True with user input, eval/exec, pickle.loads, unsafe yaml.load, os.system with variables, or dangerouslySetInnerHTML with user data.

Full details: Ai-Attribution

Explanation

The pull request adds one Dependabot commit. Its message has no AI-tool mention, Co-Authored-By, Assisted-by, or Generated-by trailer. The patch only changes the Dockerfile image tag. A Co-Authored-By: Claude Sonnet 4.5 trailer exists in an older commit already contained in origin/main, so it is pre-existing and not introduced by this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/docker/ubi9/go-toolset-1787774847

---

_{Comment @coderabbitai help to get the list of available commands.}