Update go toolchain directive to v1.26.5 (main)

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
go (source)	toolchain	minor	1.25.7 → 1.26.5

---

Release Notes

golang/go (go)

v1.26.5

v1.26.4

v1.26.3

v1.26.2

v1.26.1

v1.26.0

v1.25.12

v1.25.11

v1.25.10

v1.25.9

v1.25.8

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
unit-tests	100.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 10:03 PM UTC · Completed 10:07 PM UTC
Commit: 7c8ccca · View workflow run →

[fullsend-ai-review]

Review — ✅ Approve

PR: #1663 — Update go toolchain directive to v1.26.5 (main)
Author: renovate[bot] (automated dependency management)

Summary

Routine Go toolchain update from go1.25.7 → go1.26.5 across two sub-modules (acceptance/ and docs/). This is a minor-version bump generated by Renovate.

Changes reviewed

File	Change
acceptance/go.mod	toolchain go1.25.7 → toolchain go1.26.5
docs/go.mod	toolchain go1.25.7 → toolchain go1.26.5
docs/go.sum	Transitive dependency checksums updated (+25/−11 entries)

Analysis

Correctness: The go directive (minimum required version) is unchanged in both modules — go 1.25.3 in acceptance/go.mod and go 1.24.6 in docs/go.mod. Only the toolchain directive (preferred build toolchain) is bumped, which is the correct behavior for a toolchain-only update. The new transitive dependencies in docs/go.sum (JWX/JWT libraries, crypto, asm optimizations) are expected — OPA v1.12.3 resolves additional transitive deps under Go 1.26. All new packages are well-known, established Go libraries already present in the root go.mod.

Security: No security concerns. The new transitive dependencies (lestrrat-go/jwx, segmentio/asm, golang.org/x/crypto, etc.) are standard, widely-used packages. Stale checksum entries (e.g., OPA v1.6.0, old go-metrics) are cleaned up.

Scope & intent: Properly scoped automated Renovate update. The root go.mod is unaffected (it does not declare a toolchain directive).

Documentation / conventions: No documentation impact. Follows the project's established Renovate workflow.

Cross-repo contracts: No API, schema, or interface changes.

No findings above the severity threshold.