chore(deps): update github.com/digitorus/pkcs7 digest to 05f7944

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Type	Update	Change
github.com/digitorus/pkcs7	indirect	digest	ffadbf3 → 05f7944

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux-kflux-prd-rh02]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.26.5 -> 1.27

[ambient-code]

Automated Dependency Check Summary

Checked by: automated review (2026-08-25)

1. go.mod Sub-project Check

This PR modifies go.mod. There is only one go.mod in this repository (no nested Go sub-modules), so no additional module files need updating.

2. CI Status — ⚠️ ALL CHECKS FAILING

CI is failing with:

Error: load packages: go: ../go.mod requires go >= 1.27 (running go 1.26.6; GOTOOLCHAIN=local)
Error: can't load config: the Go language version (go1.26) used to build golangci-lint is lower than the targeted Go version (1.27)

Root cause: Although advertised as a simple digest bump for github.com/digitorus/pkcs7 (ffadbf3 → 05f79448), the new commit of that library has a minimum Go 1.27 requirement. This caused the bot to also bump the go directive in go.mod from go 1.26.5 → go 1.27. Our CI workflow uses Go 1.26 (GO_VERSION: 1.26), so the build fails immediately.

Additionally, this PR made significant unrelated changes to go.mod structure (shuffling deps between require blocks, promoting several indirect deps to direct), which appears to be an artifact of go mod tidy under Go 1.27.

This is an incompatible update. Options:

• Option A: Update CI to use Go 1.27 (.github/workflows/build.yml, lint.yml, etc.) — this is a broader project decision.
• Option B: Keep pkcs7 pinned to the previous commit (ffadbf3) that is compatible with Go 1.26 and close this PR.

3. Kubernetes Version Bump Check

This PR does not directly modify any k8s.io/* package versions, though the go.mod restructuring moved several k8s-related indirect deps. This is not a k8s API version bump.

Assessment

🚫 Do not merge as-is. The new pkcs7 version requires Go 1.27, breaking CI. The team needs to decide whether to upgrade Go to 1.27 (which is now available and stable) or stay on the previous pkcs7 digest. If the Go upgrade is desired, it should be done intentionally as a separate PR.