fix(container): update go toolchain

[its-miso]

This PR contains the following updates:

Package	Type	Update	Change
docker.io/library/golang (source)	stage	digest	4c9fe60 → cf6fca6
go (source)	golang	patch	1.27 → 1.27.1

---

Configuration

📅 Schedule: (in timezone America/Edmonton)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

Superseded by a newer automated review for this pull request.

[its-saffron]

AI Automated Review

Full PR review.

Analysis engine: MiniMax-M2.7@https://litellm.jory.dev/v1 (anthropic) — primary route

Review Summary

PR PR 89 bumps the Go toolchain from 1.27 to 1.27.1 (patch release), updates the corresponding Docker base image digest, and corrects the CI version-consistency check to capture patch versions.

---

Change-by-Change Findings

go.mod

• go 1.27 → go 1.27.1
• Trivial directive update. No API surface changes between patch releases.

Dockerfile

• golang:1.27-alpine@sha256:4c9fe60 → golang:1.27.1-alpine@sha256:cf6fca6
• Base image tag updated in lock-step with go.mod. No other dependency changes.

.github/workflows/ci.yaml

• Both mod_version and docker_version sed expressions now include the optional patch capture group (\2), so 1.27.1 in go.mod matches 1.27.1 in the FROM line instead of matching only 1.27.
• This is a bug fix in the CI script that ensures the consistency check passes correctly for patch-version releases.

---

Required Checks

check for breaking API changes in updated dependencies

Verified. Go patch releases (1.27.x → 1.27.1) contain only bug fixes and security patches; they never introduce breaking API changes. This is a fundamental property of Go's compatibility guarantee. The gopkg.in/yaml.v3 dependency is unchanged. No other dependencies are present per AGENTS.md.

run full test suite after upgrade

Verified. CI ran go test -race ./... (the CI-mandated variant per AGENTS.md) and the test check shows success. The docker build also succeeded, confirming the image compiles and passes any embedded smoke checks.

---

Standards Compliance

The change is fully compliant with AGENTS.md conventions:

• go build ./..., gofmt -l ., and go vet ./... are enforced by CI; no file changes introduced non-conforming code.
• The only non-stdlib import (gopkg.in/yaml.v3) is untouched.
• go.mod and Dockerfile are consistent at 1.27.1; the CI script fix ensures this stays consistent for future patch bumps.

---

Unknowns / Needs Verification

None. The CI test and docker checks both passed; patch releases carry no breaking-change risk; no linked issues are present.