From 0d423dc53ca799dadd8da299c4e75151c3d13fab Mon Sep 17 00:00:00 2001
From: "its-miso[bot]" <258898867+its-miso[bot]@users.noreply.github.com>
Date: Sun, 6 Sep 2026 18:40:36 +0000
Subject: [PATCH 1/2] fix(container): update go toolchain

---
 Dockerfile | 2 +-
 go.mod     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 7331628..b2ad119 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM docker.io/library/golang:1.27-alpine@sha256:4c9fe60190a2a3350ddc51de80d0224b8a6698d12bdfc999fee45ea9d6c46dbc AS builder
+FROM docker.io/library/golang:1.27-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125 AS builder
 ARG TARGETOS
 ARG TARGETARCH
 ARG VERSION
diff --git a/go.mod b/go.mod
index bf01c1a..22485b0 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/misospace/alert-triage
 
-go 1.27
+go 1.27.1
 
 // yaml.v3 is the sole non-stdlib dependency (see AGENTS.md). It is pinned at
 // v3.0.1; go.sum also carries its transitive test dep gopkg.in/check.v1 so the

From e517e16b0fed3dffac23f560e7a81d28fb57a166 Mon Sep 17 00:00:00 2001
From: Jory Irving <jory@jory.dev>
Date: Sun, 6 Sep 2026 12:47:15 -0600
Subject: [PATCH 2/2] fix(ci): keep Go builder patch version aligned

---
 .github/workflows/ci.yaml | 4 ++--
 Dockerfile                | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index a7a37c5..b480cdb 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -18,8 +18,8 @@ jobs:
       - run: go test -race ./...
       - name: Check Go version consistency
         run: |
-          mod_version="$(sed -nE 's/^go[[:space:]]+([0-9]+[.][0-9]+)([.][0-9]+)?([[:space:]]|$).*/\1/p' go.mod)"
-          docker_version="$(sed -nE 's|^FROM[[:space:]]+docker[.]io/library/golang:([0-9]+[.][0-9]+)([.][0-9]+)?-.*|\1|p' Dockerfile)"
+          mod_version="$(sed -nE 's/^go[[:space:]]+([0-9]+[.][0-9]+)([.][0-9]+)?([[:space:]]|$).*/\1\2/p' go.mod)"
+          docker_version="$(sed -nE 's|^FROM[[:space:]]+docker[.]io/library/golang:([0-9]+[.][0-9]+)([.][0-9]+)?-.*|\1\2|p' Dockerfile)"
           if [ -z "$mod_version" ]; then
             echo "::error::go.mod has no go directive"
             exit 1
diff --git a/Dockerfile b/Dockerfile
index b2ad119..bbd6e4e 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1
 
-FROM docker.io/library/golang:1.27-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125 AS builder
+FROM docker.io/library/golang:1.27.1-alpine@sha256:cf6fca6641884b8433441b2b0652976f975e1d0fdd26d177eaaf8596087f3125 AS builder
 ARG TARGETOS
 ARG TARGETARCH
 ARG VERSION