Skip to content

fix(#3360): add missing "go version" group to Renovate config#3361

Open
fullsend-ai-coder[bot] wants to merge 1 commit into
mainfrom
agent/3360-renovate-go-version-group
Open

fix(#3360): add missing "go version" group to Renovate config#3361
fullsend-ai-coder[bot] wants to merge 1 commit into
mainfrom
agent/3360-renovate-go-version-group

Conversation

@fullsend-ai-coder

Copy link
Copy Markdown

The org-level Renovate config excludes Go-related packages (golang, go-toolset Docker images and the go directive in go.mod) from the "docker images" and "go modules" groups, expecting them to be handled by a "go version" group — but that group rule was never defined.

This caused Go version bump PRs to only update .tool-versions, leaving Dockerfile, Dockerfile.dist, and all go.mod files pinned to the old version. The review agent would flag the mismatch and the PRs would be autoclosed without merging.

Add a packageRule in the repo-level renovate.json that groups all Go version dependencies (go, golang, docker.io/library/golang, registry.access.redhat.com/ubi9/go-toolset) under the "go version" groupName. This ensures Renovate updates all 7 files atomically in a single PR.


Closes #3360

Post-script verification

  • Branch is not main/master (agent/3360-renovate-go-version-group)
  • Secret scan passed (gitleaks — 76afa950a33babbf6b18ff2d9468c21d74ffe34e..HEAD)
  • Pre-commit hooks passed (authoritative run on runner)
  • Tests ran inside sandbox

The org-level Renovate config excludes Go-related packages (golang,
go-toolset Docker images and the go directive in go.mod) from the
"docker images" and "go modules" groups, expecting them to be handled
by a "go version" group — but that group rule was never defined.

This caused Go version bump PRs to only update .tool-versions,
leaving Dockerfile, Dockerfile.dist, and all go.mod files pinned
to the old version. The review agent would flag the mismatch and
the PRs would be autoclosed without merging.

Add a packageRule in the repo-level renovate.json that groups all
Go version dependencies (go, golang, docker.io/library/golang,
registry.access.redhat.com/ubi9/go-toolset) under the "go version"
groupName. This ensures Renovate updates all 7 files atomically
in a single PR.

Closes #3360
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 26, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 8:53 PM UTC · Completed 9:00 PM UTC
Commit: 47d3320 · View workflow run →

@fullsend-ai-review

Copy link
Copy Markdown

Looks good to me.

Findings

Low

  • [logic-error] renovate.json:7 — The org-level Renovate config excludes golang/go from the "docker images" group (via matchPackageNames: ["!golang/go"]), but the new repo-level "go version" group does not include golang/go in its matchDepNames. If Renovate ever identifies a dependency with that name, it would be excluded from "docker images" but not captured by "go version", leaving it ungrouped. No file in this repo currently uses golang/go as a dependency name, so this is a theoretical gap rather than an active defect.
    Remediation: Consider adding "golang/go" to the matchDepNames array for completeness and symmetry with the org-level exclusion list.

Labels: PR modifies Renovate dependency management configuration for Go version grouping

Comment thread renovate.json
"github>conforma/.github//config/renovate/renovate.json"
],
"packageRules": [
{

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[low] logic-error

The org-level Renovate config excludes golang/go from the 'docker images' group (via matchPackageNames: ["!golang/go"]), but the new repo-level 'go version' group does not include golang/go in its matchDepNames. If Renovate ever identifies a dependency with that name, it would be excluded from 'docker images' but not captured by 'go version', leaving it ungrouped. No file in this repo currently uses golang/go as a dependency name, so this is a theoretical gap rather than an active defect.

Suggested fix: Consider adding "golang/go" to the matchDepNames array for completeness and symmetry with the org-level exclusion list.

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge config dependencies Pull requests that update a dependency file labels Jun 26, 2026
@codecov

codecov Bot commented Jun 26, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag Coverage Δ
acceptance 53.44% <ø> (ø)
generative 16.79% <ø> (ø)
integration 27.66% <ø> (ø)
unit 69.13% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

config dependencies Pull requests that update a dependency file ready-for-merge All reviewers approved — ready to merge size: XS

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Configure Renovate to update Go version across all pinning files atomically

0 participants