chore(deps): update golang.org/x/exp/typeparams digest to c48552f

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
golang.org/x/exp/typeparams	indirect	digest	ec58324 → c48552f

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.21 -> 1.25.0

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.0 -> 1.25.0

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 9:48 PM UTC · Completed 10:00 PM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

Review

Findings

High

• [api-contract] go.mod:3 — The go directive is bumped from 1.23.0 to 1.25.0, but the PR title and description only mention updating the golang.org/x/exp/typeparams dependency. The Dockerfile uses registry.access.redhat.com/ubi9/go-toolset:9.8-1780373831 as the builder image, which likely ships Go 1.22 or 1.23. If that image does not include Go 1.25+, go mod download and go build will fail because they reject a go 1.25.0 directive they cannot satisfy. Even if the image happens to include Go 1.25, this version bump changes available language semantics and should be an intentional, reviewed change rather than a side-effect of a dependency bot PR.
  Remediation: Remove the go 1.25.0 change from this PR (keep go 1.23.0). If the new typeparams digest truly requires Go 1.25, that should be called out explicitly and the Dockerfile base image verified or updated to match. Otherwise, bump the go directive in a separate, deliberate PR after confirming CI toolchain compatibility.

Previous run

Review

Findings

High

• [scope-creep] go.mod:3 — PR title and body claim this is only a dependency digest update for golang.org/x/exp/typeparams, but the diff also bumps the Go directive from 1.22.0 to 1.25.0. This is an undisclosed toolchain change bundled with a routine dependency update.
  Remediation: Split into two separate PRs, or at minimum disclose and justify the Go version bump in the PR description.

• [logic-error] go.mod:3 — Go directive bumped to 1.25.0 while all CI workflows (test.yml, lint.yml, pre-commit.yml, slack-message.yml) hardcode Go 1.22. Since Go 1.21+, the go directive acts as a minimum version requirement. This mismatch will cause build failures in CI.
  Remediation: Remove the go directive change (keep go 1.22.0), or coordinate the upgrade across go.mod, all CI workflows, and Dockerfile.

Medium

• [missing-authorization] go.mod:3 — A Go directive bump from 1.22.0 to 1.25.0 is a major toolchain upgrade bundled with a bot-generated dependency update. No linked issue authorizes this change.
  Remediation: Create an issue to propose and plan the Go 1.25 upgrade, including CI and Dockerfile alignment.

• [dependency-integrity] go.sum:1512 — The updated golang.org/x/exp/typeparams pseudo-version (v0.0.0-20260611194520-c48552f49976) could not be verified via the Go module proxy (403 Forbidden).
  Remediation: Verify this is a legitimate commit at golang/exp@c48552f49976.

Low

• [bot-behavior-anomaly] go.mod:3 — No renovate.json config found in the repository. The Go directive bump alongside a digest update is unusual for automated dependency bots and may indicate misconfiguration.

• [stale-doc] Multiple documentation files (CLAUDE.md:149, AGENTS.md:59, skills/ci-cd-quirks/SKILL.md:19, skills/debugging-cli-locally/SKILL.md:107) contain pre-existing stale references to Go 1.21 when go.mod already specifies 1.22.0. Not caused by this PR but would worsen if the Go 1.25 bump merges without corresponding doc updates.

---

Labels: PR modifies go.mod/go.sum (dependency update) and contains an undisclosed Go version bump requiring manual review

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 10:47 AM UTC · Completed 10:53 AM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

See the review comment for full details.

[fullsend-ai-review]

[high] api-contract

The go directive is bumped from 1.23.0 to 1.25.0, but the PR title and description only mention updating the golang.org/x/exp/typeparams dependency. The Dockerfile uses registry.access.redhat.com/ubi9/go-toolset:9.8-1780373831 as the builder image, which likely ships Go 1.22 or 1.23. If that image does not include Go 1.25+, go mod download and go build will fail because they reject a go 1.25.0 directive they cannot satisfy. Even if the image happens to include Go 1.25, this version bump changes available language semantics and should be an intentional, reviewed change rather than a side-effect of a dependency bot PR.

Suggested fix: Remove the go 1.25.0 change from this PR (keep go 1.23.0). If the new typeparams digest truly requires Go 1.25, that should be called out explicitly and the Dockerfile base image verified or updated to match. Otherwise, bump the go directive in a separate, deliberate PR after confirming CI toolchain compatibility.