Update go toolchain directive to v1.26.4

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change	Pending
go (source)	toolchain	minor	1.25.5 → 1.26.4	1.26.5

---

Release Notes

golang/go (go)

v1.26.4

v1.26.3

v1.26.2

v1.26.1

v1.26.0

v1.25.12

v1.25.11

v1.25.10

v1.25.9

v1.25.8

v1.25.7

v1.25.6

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[pacho-rh]

We'll wait on this until the go-toolset images are updated for Go 1.26 as well

[FaisalAl-Rayes]

/review

[qodo-code-review]

PR Reviewer Guide 🔍

Warning

/review is deprecated. Use /agentic_review instead (removal date not yet scheduled).

Here are some key observations to aid the review process:

⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪

🧪 No relevant tests

🔒 No security concerns identified

⚡ Recommended focus areas for review Compatibility Updating the toolchain to go1.26.3 while keeping the module go directive at 1.25.0 can change build behavior in CI/dev environments that honor the toolchain directive; verify downstream tooling and pipelines are compatible with Go 1.26.x and that this is the intended policy (toolchain bump without go directive bump). go 1.25.0 toolchain go1.26.3 Reproducibility Confirm the repository’s build images and CI runners will actually have (or can fetch) Go 1.26.3 so builds remain reproducible and don’t fail due to unavailable toolchains or restricted network access when auto-downloading toolchains is required. toolchain go1.26.3

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 10:44 PM UTC · Completed 10:51 PM UTC
Commit: 01f864b · View workflow run →

[fullsend-ai-review]

Review

Findings

Medium

• [API contract violation] Dockerfile:1 — The Dockerfile builder image uses ubi9/go-toolset:1.25.9 (Go 1.25.x), but the updated go.mod now requests toolchain go1.26.4. With Go's default GOTOOLCHAIN=auto, the build will attempt to download go1.26.4 at build time. In restricted or air-gapped build environments (common in Konflux/Brew pipelines), this automatic download may fail, breaking the container build. Even if the download succeeds, the Dockerfile's pinned Go version is effectively bypassed, and the actual compiler version used is not controlled by the container image.
  Remediation: Either update the Dockerfile builder image to a Go 1.26.x base image (e.g., ubi9/go-toolset:1.26.x), or set ENV GOTOOLCHAIN=local in the Dockerfile to force use of the bundled toolchain (which would then require the go directive to be compatible with Go 1.25.x, which it is at go 1.25.0).