Bump Go toolchain to 1.26.2 for CVE fix (#3336)

* chore(server): bump Go version to 1.26.2 for CVE fix (DT-3889)

* chore: update Go version to 1.26.2 in Dockerfile and .tool-versions

Author: rossnelson

.tool-versions

@@ -1,3 +1,3 @@
 pnpm 10.10.0
 nodejs 22.14.0
-golang 1.24.11
+golang 1.26.2

server/Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.25.7-alpine3.23 AS server-builder
+FROM golang:1.26.2-alpine3.23 AS server-builder
 
 RUN apk upgrade --no-cache && \
     apk add --no-cache \
@@ -15,7 +15,7 @@ COPY . ./
 
 RUN make build-server
 
-FROM golang:1.25.7-alpine3.23 AS dockerize-builder
+FROM golang:1.26.2-alpine3.23 AS dockerize-builder
 
 ARG DOCKERIZE_VERSION=v0.10.1
 RUN go install github.com/jwilder/dockerize@${DOCKERIZE_VERSION} && \

server/go.mod

@@ -1,6 +1,6 @@
 module github.com/temporalio/ui-server/v2
 
-go 1.24.11
+go 1.26.2
 
 require (
 	github.com/Masterminds/sprig/v3 v3.3.0