Update golang:1.25.5-bookworm Docker digest to cbd59ce

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
golang	stage	digest	5117d68 -> cbd59ce

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

🤖 Claude Code Review

Code Review Results

Summary

This PR updates the Docker image digest for golang:1.25.5-bookworm in two Dockerfile configurations. This is a routine security/maintenance update that changes the pinned SHA256 hash for the base builder image.

---

Code Quality

✅ Code follows style guide - The changes are simple digest updates in Dockerfiles. No code style issues.

✅ No commented-out code - No commented code present in the diff.

✅ Meaningful variable names - N/A, no new variables introduced.

✅ DRY principle followed - The same digest update is consistently applied across both files.

✅ Defects identified - No bugs, logic errors, edge cases, or security vulnerabilities detected in this change. This is a straightforward digest update.

✅ Project memory configuration - The .claude/CLAUDE.md file reviewed contains appropriate general guidance without environment-specific details.

---

Testing

⚠️ Unit tests for new functions - N/A for Docker digest updates.

⚠️ Integration tests for new endpoints - N/A for Docker digest updates.

⚠️ Edge cases covered - N/A for Docker digest updates.

❌ Test coverage > 80% - While not applicable to this specific change, Docker builds should be tested. Recommendation: Verify that make docker-build succeeds with the new image digest.

Recommendation: Run make docker-build to verify the new digest is valid and builds successfully.

---

Documentation

❌ README updated if needed - N/A, no README changes required for Docker digest updates.

❌ API docs updated - N/A, no API changes.

❌ Inline comments for complex logic - N/A, no complex logic added.

❌ CHANGELOG.md updated - The CHANGELOG.md at /home/runner/work/observe/observe/CHANGELOG.md:8-10 shows an empty [Unreleased] section. This Docker image digest update should be documented there.

Required Action: Update CHANGELOG.md:8-10 to document this change:

## [Unreleased]

- Update golang:1.25.5-bookworm Docker digest to cbd59ce

❌ Markdown formatting - The CHANGELOG.md appears properly formatted per CommonMark specification. However, the empty bullet point on line 10 should be replaced with the actual change.

---

Security

✅ No hardcoded credentials - No credentials in the diff.

✅ Input validation implemented - N/A for Docker digest updates.

✅ Proper error handling - N/A for Docker digest updates.

✅ No sensitive data in logs - No logging changes.

✅ No license files (.lic) or AQAAAD strings - No license files or suspicious strings detected.

---

Summary & Required Actions

Status: ⚠️ Requires Minor Updates

Required Changes

1. Update CHANGELOG.md (Dockerfile:5, package.Dockerfile:5):
   • Document the Docker image digest update in the [Unreleased] section
   • Replace the empty bullet point at line 10 with: - Update golang:1.25.5-bookworm Docker digest to cbd59ce

Recommended Actions

1. Verify Docker builds: Run make docker-build to confirm the new digest is valid and builds successfully.

Approval Recommendation

Approve with minor changes - The code changes are correct and safe. Only documentation update needed before merge.

Automated code review analyzing defects and coding standards