chore(deps): update registry.access.redhat.com/ubi10/go-toolset docker digest to 6abcb6b

[renovate-fullsend]

This PR contains the following updates:

Package	Type	Update	Change
registry.access.redhat.com/ubi10/go-toolset	stage	digest	a060288 → 6abcb6b

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:30 PM UTC · Completed 3:37 PM UTC

Commit: a7cf743 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $1.56

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[fullsend-ai-review]

Review

Findings

High

• [protected-path] images/runner/Containerfile — This PR modifies images/runner/Containerfile, which is under the protected path images/. Protected paths contain governance and infrastructure files that require human approval. The PR has no linked issue providing authorization for the change.
  Remediation: Human review and approval is required for changes to protected infrastructure paths. A human maintainer should verify this Renovate bot digest bump and approve.

---

Next steps:

• /fs-fix — agent addresses review findings automatically
• /fs-fix <your instruction> — agent fixes with your specific guidance
• Push commits directly — review re-runs automatically on push
• /fs-fix-stop — disable automatic fix runs for this PR

Previous run

Review

Findings

High

• [protected-path] images/runner/Containerfile — This PR modifies images/runner/Containerfile, which is under the protected path images/. Protected paths contain governance and infrastructure files that require human approval. The PR has no linked issue providing authorization for the change.
  Remediation: Human review and approval is required for changes to protected infrastructure paths. A human maintainer should verify this Renovate bot digest bump and approve.

---

Next steps:

• /fs-fix — agent addresses review findings automatically
• /fs-fix <your instruction> — agent fixes with your specific guidance
• Push commits directly — review re-runs automatically on push
• /fs-fix-stop — disable automatic fix runs for this PR

Previous run (2)

Review

Findings

High

• [protected-path] images/runner/Containerfile — This PR modifies images/runner/Containerfile, which is under the protected path images/. Protected paths contain governance and infrastructure files that require human approval. The PR has no linked issue providing authorization for the change.
  Remediation: Human review and approval is required for changes to protected infrastructure paths. A human maintainer should verify this Renovate bot digest bump and approve.

---

Next steps:

• /fs-fix — agent addresses review findings automatically
• /fs-fix <your instruction> — agent fixes with your specific guidance
• Push commits directly — review re-runs automatically on push
• /fs-fix-stop — disable automatic fix runs for this PR

Previous run (3)

Review

Findings

High

• [protected-path] images/runner/Containerfile — This PR modifies images/runner/Containerfile, which is under the protected path images/. Protected paths contain governance and infrastructure files that require human approval. The PR has no linked issue providing authorization for the change.
  Remediation: Human review and approval is required for changes to protected infrastructure paths. A human maintainer should verify this Renovate bot digest bump and approve.

---

Next steps:

• /fs-fix — agent addresses review findings automatically
• /fs-fix <your instruction> — agent fixes with your specific guidance
• Push commits directly — review re-runs automatically on push
• /fs-fix-stop — disable automatic fix runs for this PR

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 3:36 AM UTC · Completed 3:48 AM UTC

Commit: 077e908 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.59

[fullsend-ai-review]

Risk Assessment: moderate (2/5)

Details

Automated bot digest-pin bump of a single container base image line in a Containerfile. Tier 1 signals are minimal (1 file, 2 lines, small blast radius, bot author), but the protected path (images/) elevates one dimension. Tier 2 git history shows elevated churn (19 commits in 30d) and multi-author contention (5 distinct authors in 90d) on this file. Signals are essentially unchanged from the prior assessment, preserving the score at 2.

Previous run

Risk Assessment: moderate (2/5)

Details

Automated bot digest-pin bump of a single container base image line in a Containerfile. Tier 1 signals are minimal (1 file, 2 lines, small blast radius, bot author), but the protected path (images/) elevates one dimension. Tier 2 git history shows elevated churn (20 commits in 30d) and multi-author contention (5 distinct authors in 90d) on this file, nudging the composite from the prior score of 1 to 2.

Previous run (2)

Risk Assessment: low (1/5)

Details

Automated bot digest-pin bump of a single container base image line in a well-maintained Containerfile; minimal blast radius and routine dependency update pattern.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 4:14 PM UTC · Completed 4:25 PM UTC

Commit: 3996ba2 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.04

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 5:01 AM UTC · Completed 5:16 AM UTC

Commit: d2ce3c6 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.03

[fullsend-ai-review]

See the review comment for full details.