slauger · slauger · Aug 19, 2026 · Aug 12, 2026 · Aug 12, 2026 · Aug 12, 2026
diff --git a/.github/workflows/_conforma-validate.yaml b/.github/workflows/_conforma-validate.yaml
@@ -27,7 +27,7 @@ jobs:
       packages: read
     env:
       # renovate: datasource=github-releases depName=conforma/cli
-      EC_VERSION: "0.9.102"
+      EC_VERSION: "0.9.112"
     steps:
       - name: Checkout
         uses: actions/checkout@v7

diff --git a/go.mod b/go.mod
@@ -2,7 +2,7 @@ module github.com/slauger/openvox-operator
 
 go 1.26.4
 
-toolchain go1.26.5
+toolchain go1.26.6
 
 require (
 	github.com/prometheus/client_golang v1.24.1
@@ -66,17 +66,17 @@ require (
 	go.uber.org/zap v1.27.1 // indirect
 	go.yaml.in/yaml/v2 v2.4.4 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/mod v0.38.0 // indirect
-	golang.org/x/net v0.57.0 // indirect
+	golang.org/x/mod v0.39.0 // indirect
+	golang.org/x/net v0.58.0 // indirect
 	golang.org/x/oauth2 v0.36.0 // indirect
 	golang.org/x/sync v0.22.0 // indirect
 	golang.org/x/sys v0.47.0 // indirect
-	golang.org/x/telemetry v0.0.0-20260708182218-49f421fb7959 // indirect
+	golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5 // indirect
 	golang.org/x/term v0.45.0 // indirect
-	golang.org/x/text v0.40.0 // indirect
+	golang.org/x/text v0.41.0 // indirect
 	golang.org/x/time v0.15.0 // indirect
-	golang.org/x/tools v0.48.0 // indirect
-	golang.org/x/vuln v1.6.0 // indirect
+	golang.org/x/tools v0.49.0 // indirect
+	golang.org/x/vuln v1.7.0 // indirect
 	gomodules.xyz/jsonpatch/v2 v2.5.0 // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260226221140-a57be14db171 // indirect
 	google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect

diff --git a/go.sum b/go.sum
@@ -190,33 +190,33 @@ go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93 h1:fQsdNF2N+/YewlRZiricy4P1iimyPKZ/xwniHj8Q2a0=
 golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93/go.mod h1:EPRbTFwzwjXj9NpYyyrvenVh9Y+GFeEvMNh7Xuz7xgU=
-golang.org/x/mod v0.38.0 h1:MECBjubtXD7yj4HrhIUcywNaGeNVUdfVnxmPajOk4yk=
-golang.org/x/mod v0.38.0/go.mod h1:V6Xz0pq8TQ3dGqVQ1FVHuelZpAL0uNhSkk9ogYP3c40=
-golang.org/x/net v0.57.0 h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE=
-golang.org/x/net v0.57.0/go.mod h1:KpXc8iv+r3XplLAG/f7Jsf9RPszJzdR0f58q9vGOuEU=
+golang.org/x/mod v0.39.0 h1:UF5zwQdCRRUpHfyPwr7d4UrGiVeldIsogtzWVnczL74=
+golang.org/x/mod v0.39.0/go.mod h1:bvIbwjQ0HUFFf5AKukeeYQG4ZBUG9yxQbR9aEweIwYY=
+golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
+golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
 golang.org/x/oauth2 v0.36.0 h1:peZ/1z27fi9hUOFCAZaHyrpWG5lwe0RJEEEeH0ThlIs=
 golang.org/x/oauth2 v0.36.0/go.mod h1:YDBUJMTkDnJS+A4BP4eZBjCqtokkg1hODuPjwiGPO7Q=
 golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek=
 golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
 golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
 golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
 golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
-golang.org/x/telemetry v0.0.0-20260708182218-49f421fb7959 h1:RJhm5l6Fo4rmEIcndxDllNhhf/fAx8qIm4t6A7vpm2A=
-golang.org/x/telemetry v0.0.0-20260708182218-49f421fb7959/go.mod h1:LV7u5Oco+Z/g6XI7PqN+EUUUGGkEcmB1uj2ceI0fOVg=
+golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5 h1:ZUSxONxc981v7AW7QUg+I9WwZzSTTJ019ENBYr5pV/Q=
+golang.org/x/telemetry v0.0.0-20260811182544-a038080d80e5/go.mod h1:LVehoXe41cL5SCVQilsV7Gg6BNG+Js6P9PhSbYTIUkQ=
 golang.org/x/term v0.45.0 h1:NwWyBmoJCbfTHpxrWoZ9C6/VxOf7ic219I8xZZFdrf0=
 golang.org/x/term v0.45.0/go.mod h1:9aqxs0blBcrm/n0L9QW0aRVD+ktan8ssZromtqJC43w=
-golang.org/x/text v0.40.0 h1:Ub2Z6/xjgF1WrYQz2nuITOEegKFtiIy+rieRJ5lHZKs=
-golang.org/x/text v0.40.0/go.mod h1:hpnzDAfGV753zIKo+wk3u1bVKCGPbrnF7+7LBF/UHVY=
+golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
+golang.org/x/text v0.41.0/go.mod h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
 golang.org/x/time v0.15.0 h1:bbrp8t3bGUeFOx08pvsMYRTCVSMk89u4tKbNOZbp88U=
 golang.org/x/time v0.15.0/go.mod h1:Y4YMaQmXwGQZoFaVFk4YpCt4FLQMYKZe9oeV/f4MSno=
-golang.org/x/tools v0.48.0 h1:3+hClM1aLL5mjMKm5ovokw9epgRXPuu2tILgismM6RE=
-golang.org/x/tools v0.48.0/go.mod h1:08xX0orndb/F7jJxGDicx061tyd5pcMto75YMAXr6lk=
+golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI=
+golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=
 golang.org/x/tools/go/expect v0.1.1-deprecated h1:jpBZDwmgPhXsKZC6WhL20P4b/wmnpsEAGHaNy0n/rJM=
 golang.org/x/tools/go/expect v0.1.1-deprecated/go.mod h1:eihoPOH+FgIqa3FpoTwguz/bVUSGBlGQU67vpBeOrBY=
 golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated h1:1h2MnaIAIXISqTFKdENegdpAgUXz6NrPEsbIeWaBRvM=
 golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated/go.mod h1:RVAQXBGNv1ib0J382/DPCRS/BPnsGebyM1Gj5VSDpG8=
-golang.org/x/vuln v1.6.0 h1:FeMO9Rm/HwyduOztbvKcOw+zvDEPr4I4aQNSfevFcKY=
-golang.org/x/vuln v1.6.0/go.mod h1:bWlG2493/sjR7ksvicBgMrznH3eYQEyK8ifUYBrqUbg=
+golang.org/x/vuln v1.7.0 h1:4MQBuhmXbz2uepNJrf3v+aaZLGDqw1JluwYboegA1qg=
+golang.org/x/vuln v1.7.0/go.mod h1:Xw7zvU3e1bsCYYBXu+w4wcn2Kgn27f34WBCTw8LL5Us=
 gomodules.xyz/jsonpatch/v2 v2.5.0 h1:JELs8RLM12qJGXU4u/TO3V25KW8GreMKl9pdkk14RM0=
 gomodules.xyz/jsonpatch/v2 v2.5.0/go.mod h1:AH3dM2RI6uoBZxn3LVrfvJ3E0/9dG4cSrbuBJT4moAY=
 google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 h1:merA0rdPeUV3YIIfHHcH4qBkiQAc1nfCKSI7lB4cV2M=

diff --git a/images/openvox-agent/Containerfile b/images/openvox-agent/Containerfile
@@ -13,7 +13,7 @@ ARG OPENVOX_AGENT_VERSION=8.28.1
 # OPENVOX_MAJOR selects the release repo (openvox${OPENVOX_MAJOR}-release-el-9).
 ARG OPENVOX_MAJOR=8
 
-FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177
+FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871
 
 ARG OPENVOX_AGENT_VERSION
 ARG OPENVOX_MAJOR

diff --git a/images/openvox-db/Containerfile b/images/openvox-db/Containerfile
@@ -16,7 +16,7 @@ ARG OPENVOXDB_VERSION=8.15.0
 ################################################################################
 # Stage: base — JRE + minimal runtime deps
 ################################################################################
-FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177 AS base
+FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871 AS base
 
 ARG JDK_VERSION=21
 

diff --git a/images/openvox-e2e-code/Containerfile b/images/openvox-e2e-code/Containerfile
@@ -8,7 +8,7 @@
 #   podman build -t openvox-e2e-code:latest -f images/openvox-e2e-code/Containerfile .
 
 # Stage 1: Install modules with r10k
-FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177 AS builder
+FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871 AS builder
 
 RUN dnf module enable ruby:3.3 -y \
     && dnf install -y --setopt=install_weak_deps=False ruby ruby-devel rubygem-bundler git gcc make redhat-rpm-config libffi-devel \

diff --git a/images/openvox-mock/Containerfile b/images/openvox-mock/Containerfile
@@ -3,15 +3,15 @@
 # Build (from repo root):
 #   podman build -t openvox-mock:latest -f images/openvox-mock/Containerfile .
 
-FROM docker.io/library/golang:1.26.5 AS builder
+FROM docker.io/library/golang:1.26.6 AS builder
 
 WORKDIR /src
 COPY go.mod go.sum ./
 RUN go mod download
 COPY cmd/mock/ cmd/mock/
 RUN CGO_ENABLED=0 go build -o /openvox-mock ./cmd/mock/
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786380870
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786987521
 
 LABEL org.opencontainers.image.title="OpenVox Mock" \
       org.opencontainers.image.description="Mock ENC/Report/OpenVox DB receiver for E2E tests" \

diff --git a/images/openvox-operator/Containerfile b/images/openvox-operator/Containerfile
@@ -1,4 +1,4 @@
-FROM docker.io/library/golang:1.26.5 AS builder
+FROM docker.io/library/golang:1.26.6 AS builder
 
 WORKDIR /workspace
 COPY go.mod go.sum ./
@@ -9,7 +9,7 @@ COPY internal/ internal/
 ARG TARGETARCH
 RUN CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} go build -a -o manager ./cmd/main.go
 
-FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786380870
+FROM registry.access.redhat.com/ubi9/ubi-minimal:9.8-1786987521
 
 LABEL org.opencontainers.image.title="OpenVox Operator" \
       org.opencontainers.image.description="OpenVox Operator for Kubernetes/OpenShift" \

diff --git a/images/openvox-server-reference/Containerfile b/images/openvox-server-reference/Containerfile
@@ -4,7 +4,7 @@
 # Build:
 #   podman build -t openvox-server-reference:latest images/openvox-server-reference/
 
-FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177
+FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871
 
 RUN rpm -Uvh https://yum.voxpupuli.org/openvox8-release-el-9.noarch.rpm \
     && dnf install -y --setopt=install_weak_deps=False openvox-server \

diff --git a/images/openvox-server/Containerfile b/images/openvox-server/Containerfile
@@ -17,7 +17,7 @@ ARG OPENVOX_VERSION=8.28.1
 ################################################################################
 # Stage: base — JRE + minimal runtime deps (no Ruby)
 ################################################################################
-FROM registry.access.redhat.com/ubi9/ubi:9.8-1786339177 AS base
+FROM registry.access.redhat.com/ubi9/ubi:9.8-1786985871 AS base
 
 ARG JDK_VERSION=21
 
@@ -160,7 +160,7 @@ RUN find / -path '*/openvoxserver-ca-*/lib/puppetserver/ca/action/setup.rb' \
 ################################################################################
 # Stage: autosign — compile the openvox-autosign Go binary
 ################################################################################
-FROM docker.io/library/golang:1.26.5 AS autosign
+FROM docker.io/library/golang:1.26.6 AS autosign
 
 WORKDIR /src
 COPY go.mod go.sum ./
@@ -173,7 +173,7 @@ RUN CGO_ENABLED=0 go build -o /openvox-autosign ./cmd/autosign/
 ################################################################################
 # Stage: enc — compile the openvox-enc Go binary
 ################################################################################
-FROM docker.io/library/golang:1.26.5 AS enc
+FROM docker.io/library/golang:1.26.6 AS enc
 
 WORKDIR /src
 COPY go.mod go.sum ./
@@ -185,7 +185,7 @@ RUN CGO_ENABLED=0 go build -o /openvox-enc ./cmd/enc/
 ################################################################################
 # Stage: report — compile the openvox-report Go binary
 ################################################################################
-FROM docker.io/library/golang:1.26.5 AS report
+FROM docker.io/library/golang:1.26.6 AS report
 
 WORKDIR /src
 COPY go.mod go.sum ./

diff --git a/renovate.json b/renovate.json
@@ -66,7 +66,8 @@
       "matchManagers": [
         "gomod"
       ],
-      "groupName": "Go dependencies"
+      "groupName": "Go dependencies",
+      "semanticCommitType": "fix"
     },
     {
       "matchManagers": [
@@ -78,7 +79,8 @@
       "matchManagers": [
         "dockerfile"
       ],
-      "groupName": "Container base images"
+      "groupName": "Container base images",
+      "semanticCommitType": "fix"
     },
     {
       "matchManagers": [
@@ -92,7 +94,8 @@
       ],
       "matchCurrentValue": "/^8\\./",
       "allowedVersions": "<9.0.0",
-      "groupName": "OpenVox 8 versions"
+      "groupName": "OpenVox 8 versions",
+      "semanticCommitType": "fix"
     },
     {
       "matchManagers": [
@@ -107,7 +110,8 @@
       "matchCurrentValue": "/^9\\./",
       "allowedVersions": ">=9.0.0",
       "ignoreUnstable": false,
-      "groupName": "OpenVox 9 versions"
+      "groupName": "OpenVox 9 versions",
+      "semanticCommitType": "fix"
     },
     {
       "matchManagers": [