Update Go to 1.26.4

[lucasmrod]

Resolves #47159.

• Changes file added for user-visible changes in changes/, orbit/changes/ or ee/fleetd-chrome/changes.
  See Changes files for more information.

Testing

• QA'd all new/changed functionality manually

fleetd/orbit/Fleet Desktop

• Verified compatibility with the latest released version of Fleet (see Must rule)
• If the change applies to only one platform, confirmed that runtime.GOOS is used as needed to isolate changes
• Verified that fleetd runs on macOS, Linux and Windows
• Verified auto-update works from the released version of component to the new version (see tools/tuf/test)

Summary by CodeRabbit

• Chores
  • Updated the Go toolchain to 1.26.4 across modules, Docker build stages, and build/configuration records to standardize the toolchain version used for builds and tooling.

[Copilot]

Pull request overview

This PR bumps the repository’s Go version from 1.26.3 to 1.26.4 across the main module and several tool/third-party submodules, and updates the pinned Golang Docker base images accordingly. It also adds change entries so the upgrade is captured in release notes.

Changes:

• Updated multiple go.mod files to go 1.26.4.
• Updated Golang base images in relevant Dockerfiles to golang:1.26.4 (with new digests).
• Added change entries under changes/ and orbit/changes/ documenting the Go update.

Reviewed changes

Copilot reviewed 14 out of 15 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
tools/terraform/go.mod	Bumps tool module Go version to 1.26.4.
tools/snapshot/go.mod	Bumps tool module Go version to 1.26.4.
tools/qacheck/go.mod	Bumps tool module Go version to 1.26.4.
tools/mdm/windows/bitlocker/go.mod	Bumps tool module Go version to 1.26.4.
tools/mdm/migration/mdmproxy/Dockerfile	Updates Golang base image to 1.26.4 (pinned digest).
tools/github-manage/go.mod	Bumps tool module Go version to 1.26.4.
tools/fleet-mcp/go.mod	Bumps tool module Go version to 1.26.4.
tools/ci/setboolcheck/go.mod	Bumps tool module Go version to 1.26.4.
third_party/vuln-check/go.mod	Bumps third-party module Go version to 1.26.4.
third_party/goval-dictionary/go.mod	Bumps third-party module Go version to 1.26.4.
orbit/changes/update-go-1.26.4	Adds Orbit/Fleet Desktop changelog entry for Go 1.26.4.
infrastructure/loadtesting/terraform/docker/loadtest.Dockerfile	Updates Golang base image to 1.26.4 (pinned digest).
go.mod	Bumps Fleet root module Go version to 1.26.4.
Dockerfile-desktop-linux	Updates Golang base image to 1.26.4 (pinned digest).
changes/update-go-1.26.4	Adds Fleet server changelog entry for Go 1.26.4.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.19%. Comparing base (ac16ca6) to head (38f0356).
⚠️ Report is 7 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main   #47158      +/-   ##
==========================================
- Coverage   67.19%   67.19%   -0.01%     
==========================================
  Files        2917     2917              
  Lines      226376   226376              
  Branches    11720    11720              
==========================================
- Hits       152119   152114       -5     
- Misses      60514    60517       +3     
- Partials    13743    13745       +2     

Flag	Coverage Δ
backend	68.79% <ø> (-0.01%)	⬇️
backend-activity	85.64% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[coderabbitai]

Walkthrough

This pull request bumps Go from 1.26.3 to 1.26.4 repository-wide: it updates changelog entries, the main and multiple tooling/third-party go.mod go directives, and three Dockerfiles' Go builder base image tags/digests.

Possibly related issues

• Update Go to 1.26.4 #47160: Same objective — update Go to 1.26.4 across the repo (go.mod directives and Docker builder images).

Possibly related PRs

• fleetdm/fleet#45277: Prior similar bump (1.26.2 → 1.26.3) touching the same go.mod files and Dockerfiles.
• fleetdm/fleet#46746: Related release-note/orbit change entries for a Go toolchain bump.
• fleetdm/fleet#43771: Earlier Go toolchain and Docker base-image version updates across the same file set.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Title check	✅ Passed	The pull request title clearly and concisely summarizes the main change: updating Go from version 1.26.3 to 1.26.4 across the codebase.
Linked Issues check	✅ Passed	The PR fully satisfies the linked issue #47159 objectives: updates root go.mod and supporting module go.mod files, updates Dockerfile base images, adds changelog entries in changes/ and orbit/changes/, and maintains no application code changes.
Out of Scope Changes check	✅ Passed	All changes are strictly in-scope: go.mod files, Dockerfile base images, and changelog entries. No unrelated code modifications or feature additions are present outside the Go 1.26.4 toolchain upgrade objectives.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Description check	✅ Passed	The pull request description includes all essential elements: issue reference, changes file confirmation, testing verification, and fleetd/orbit/Fleet Desktop compatibility checks.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch update-go-to-1.26.4

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}