chore(deps): update public.ecr.aws/docker/library/golang docker tag to v1.25.5

[cultureamp-renovate]

Working with Renovate for Culture Amp

• Renovate Guide
• Renovate Troubleshooting
• Renovate How-tos

This PR contains the following updates:

Package	Type	Update	Change
public.ecr.aws/docker/library/golang (source)	stage	patch	1.25.0-alpine -> 1.25.5-alpine

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

Package	Line Rate	Health
github.com/cultureamp/migrations-runner-buildkite-plugin/aws	84%	✔
github.com/cultureamp/migrations-runner-buildkite-plugin/buildkite	0%	❌
github.com/cultureamp/migrations-runner-buildkite-plugin	0%	❌
github.com/cultureamp/migrations-runner-buildkite-plugin/plugin	18%	❌
Summary	39% (112 / 285)	❌

[liamstevens]

🤖 This comment was automatically generated by Claude Code

Merge confidence: Very confident

Key changes:

• Updates public.ecr.aws/docker/library/golang Docker image from v1.25.0-alpine to v1.25.5-alpine (patch update)
• Security Fix: Addresses vulnerabilities in crypto/x509 package (CVE fixes for certificate handling)
• Bug Fixes: Improvements to the os package used directly by this project

Risk Assessment

• All CI checks passing: backstage-entity-validator, go-ensure-deps, go-lint, go-test, renovate/stability-days, tests
• No breaking changes: This is a patch version update following semantic versioning
• Compatibility verified: Project uses Go 1.24.4 (per go.mod), which is fully compatible with the 1.25.5 runtime
• Security benefits: The crypto/x509 security fixes are particularly relevant for this Buildkite plugin's AWS service interactions
• Direct impact: Bug fixes in the os package directly benefit this codebase's file system operations

Recommendation

Safe to merge immediately. This patch update provides important security improvements and bug fixes with zero compatibility concerns. The security enhancements in certificate handling are particularly valuable for a plugin that interacts with AWS services.