Update docker.io/library/golang Docker tag to v1.27.0 (release-v0.7)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
docker.io/library/golang (source)	stage	minor	1.26.7 → 1.27.0	1.27.1

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: b4fc4440-ee4a-4769-b991-0c3c6685e716

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 2:40 AM UTC · Completed 2:46 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $1.77

[fullsend-ai-review]

Risk Assessment: moderate (2/5)

Details

Single-line Renovate minor bump of the golang base image in a protected, security-sensitive Dockerfile with a clean recent history and no fix/revert churn.

[fullsend-ai-review]

Review

Findings

Medium

• [protected-path] Dockerfile — This PR modifies Dockerfile, which is in the protected paths list (governance/infrastructure). Human approval is always required for protected-path changes, regardless of automation. Context is sufficient: the PR body describes a Renovate-generated minor version bump of the golang build-stage base image (1.26.7 → 1.27.0), and renovate.json at the repo root extends the org-wide Renovate config (github>conforma/.github//config/renovate/renovate.json) that authorizes automated Docker tag updates.

[fullsend-ai-review]

See the review comment for full details.

[fullsend-ai-review]

[medium] protected-path

PR modifies Dockerfile, a protected governance/infrastructure path. Human approval is always required for protected-path changes. Context is sufficient: PR body describes a Renovate-generated minor version bump of the golang build-stage base image (1.26.7 -> 1.27.0), and renovate.json at repo root extends the org-wide Renovate config that authorizes automated Docker tag updates.

Suggested fix: Have a human maintainer confirm the golang minor version bump is acceptable for the release-v0.7 branch, then merge.