Renovate fails when a dependency requires a newer version of Go

[haines]

How are you running Renovate?

A Mend.io-hosted app

Which platform you running Renovate on?

GitHub.com

Which version of Renovate are you using?

42.42.2

Please tell us more about your question or problem

Renovate encounters an artifact update problem because a dependency update requires a newer version of Go than we currently have pinned in our go.mod.

Command failed: go get -t ./...
go: module tailscale.com@v1.92.1 requires go >= 1.25.5; switching to go1.25.5
go: downloading go1.25.5 (linux/amd64)
go: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

Our go.mod includes the line go 1.25.4. I would've expected Renovate to update this to go 1.25.5 at the same time as bumping the dependencies.

Logs (if relevant)

Logs

{"name":"renovate","hostname":"jr-microvm","pid":696,"level":20,"logContext":"y3JRQ8i43cvbIvbNYUOnZ","repository":"cerbos/spitfire","branch":"renovate/go-deps","command":"install-tool golang 1.25.4","msg":"Executing command","time":"2025-12-15T06:03:12.677Z","v":0}
{"name":"renovate","hostname":"jr-microvm","pid":696,"level":20,"logContext":"y3JRQ8i43cvbIvbNYUOnZ","repository":"cerbos/spitfire","branch":"renovate/go-deps","durationMs":853,"stdout":"[06:03:13.293] INFO (987): Installing tool golang@1.25.4...\ngo version go1.25.4 linux/amd64\nAR='ar'\nCC='gcc'\nCGO_CFLAGS='-O2 -g'\nCGO_CPPFLAGS=''\nCGO_CXXFLAGS='-O2 -g'\nCGO_ENABLED='1'\nCGO_FFLAGS='-O2 -g'\nCGO_LDFLAGS='-O2 -g'\nCXX='g++'\nGCCGO='gccgo'\nGO111MODULE=''\nGOAMD64='v1'\nGOARCH='amd64'\nGOAUTH='netrc'\nGOBIN='/usr/local/bin'\nGOCACHE='/home/ubuntu/.cache/go-build'\nGOCACHEPROG=''\nGODEBUG=''\nGOENV='/home/ubuntu/.config/go/env'\nGOEXE=''\nGOEXPERIMENT=''\nGOFIPS140='off'\nGOFLAGS='-modcacherw'\nGOGCCFLAGS='-fPIC -m64 -pthread -Wl,--no-gc-sections -fmessage-length=0 -ffile-prefix-map=/tmp/go-build2437222666=/tmp/go-build -gno-record-gcc-switches'\nGOHOSTARCH='amd64'\nGOHOSTOS='linux'\nGOINSECURE=''\nGOMOD='/tmp/renovate/repos/github/cerbos/spitfire/hack/tailscale-traefik-forwardauth/go.mod'\nGOMODCACHE='/runner/cache/others/go/pkg/mod'\nGONOPROXY=''\nGONOSUMDB='riverqueue.com/riverpro'\nGOOS='linux'\nGOPATH='/runner/cache/others/go'\nGOPRIVATE=''\nGOPROXY='https://proxy.golang.org,https://**redacted**@riverqueue.com/goproxy,direct'\nGOROOT='/opt/containerbase/tools/golang/1.25.4'\nGOSUMDB='off'\nGOTELEMETRY='local'\nGOTELEMETRYDIR='/home/ubuntu/.config/go/telemetry'\nGOTMPDIR=''\nGOTOOLCHAIN='auto'\nGOTOOLDIR='/opt/containerbase/tools/golang/1.25.4/pkg/tool/linux_amd64'\nGOVCS=''\nGOVERSION='go1.25.4'\nGOWORK=''\nPKG_CONFIG='pkg-config'\n[06:03:13.414] INFO (987): tool already installed\n    tool: \"golang\"\n[06:03:13.503] INFO (987): Install tool golang succeeded in 227ms.\n","stderr":"","msg":"exec completed","time":"2025-12-15T06:03:13.530Z","v":0}
{"name":"renovate","hostname":"jr-microvm","pid":696,"level":20,"logContext":"y3JRQ8i43cvbIvbNYUOnZ","repository":"cerbos/spitfire","branch":"renovate/go-deps","command":"go get -t ./...","msg":"Executing command","time":"2025-12-15T06:03:13.531Z","v":0}
{"name":"renovate","hostname":"jr-microvm","pid":696,"level":20,"logContext":"y3JRQ8i43cvbIvbNYUOnZ","repository":"cerbos/spitfire","branch":"renovate/go-deps","err":{"cmd":"/bin/sh -c go get -t ./...","stderr":"go: module tailscale.com@v1.92.1 requires go >= 1.25.5; switching to go1.25.5\ngo: downloading go1.25.5 (linux/amd64)\ngo: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off\n","stdout":"","options":{"cwd":"/tmp/renovate/repos/github/cerbos/spitfire/hack/tailscale-traefik-forwardauth","encoding":"utf-8","env":["GOPATH","GOPROXY","GONOSUMDB","GOSUMDB","GOFLAGS","GIT_CONFIG_KEY_0","GIT_CONFIG_VALUE_0","GIT_CONFIG_KEY_1","GIT_CONFIG_VALUE_1","GIT_CONFIG_KEY_2","GIT_CONFIG_VALUE_2","GIT_CONFIG_COUNT","HOME","PATH","LC_ALL","LANG","CONTAINERBASE_CACHE_DIR"],"maxBuffer":10485760,"timeout":900000},"exitCode":1,"name":"ExecError","message":"Command failed: go get -t ./...\ngo: module tailscale.com@v1.92.1 requires go >= 1.25.5; switching to go1.25.5\ngo: downloading go1.25.5 (linux/amd64)\ngo: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off\n","stack":"ExecError: Command failed: go get -t ./...\ngo: module tailscale.com@v1.92.1 requires go >= 1.25.5; switching to go1.25.5\ngo: downloading go1.25.5 (linux/amd64)\ngo: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off\n\n    at ChildProcess.<anonymous> (/usr/local/renovate/lib/util/exec/common.ts:120:11)\n    at ChildProcess.emit (node:events:520:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/child_process:294:12)"},"durationMs":3118,"msg":"rawExec err","time":"2025-12-15T06:03:16.664Z","v":0}
{"name":"renovate","hostname":"jr-microvm","pid":696,"level":20,"logContext":"y3JRQ8i43cvbIvbNYUOnZ","repository":"cerbos/spitfire","branch":"renovate/go-deps","err":{"cmd":"/bin/sh -c go get -t ./...","stderr":"go: module tailscale.com@v1.92.1 requires go >= 1.25.5; switching to go1.25.5\ngo: downloading go1.25.5 (linux/amd64)\ngo: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off\n","stdout":"","options":{"cwd":"/tmp/renovate/repos/github/cerbos/spitfire/hack/tailscale-traefik-forwardauth","encoding":"utf-8","env":["GOPATH","GOPROXY","GONOSUMDB","GOSUMDB","GOFLAGS","GIT_CONFIG_KEY_0","GIT_CONFIG_VALUE_0","GIT_CONFIG_KEY_1","GIT_CONFIG_VALUE_1","GIT_CONFIG_KEY_2","GIT_CONFIG_VALUE_2","GIT_CONFIG_COUNT","HOME","PATH","LC_ALL","LANG","CONTAINERBASE_CACHE_DIR"],"maxBuffer":10485760,"timeout":900000},"exitCode":1,"name":"ExecError","message":"Command failed: go get -t ./...\ngo: module tailscale.com@v1.92.1 requires go >= 1.25.5; switching to go1.25.5\ngo: downloading go1.25.5 (linux/amd64)\ngo: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off\n","stack":"ExecError: Command failed: go get -t ./...\ngo: module tailscale.com@v1.92.1 requires go >= 1.25.5; switching to go1.25.5\ngo: downloading go1.25.5 (linux/amd64)\ngo: download go1.25.5: golang.org/toolchain@v0.0.1-go1.25.5.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off\n\n    at ChildProcess.<anonymous> (/usr/local/renovate/lib/util/exec/common.ts:120:11)\n    at ChildProcess.emit (node:events:520:35)\n    at ChildProcess.emit (node:domain:489:12)\n    at Process.ChildProcess._handle.onexit (node:internal/child_process:294:12)"},"msg":"Failed to update go.sum","time":"2025-12-15T06:03:16.665Z","v":0}
{"name":"renovate","hostname":"jr-microvm","pid":696,"level":20,"logContext":"y3JRQ8i43cvbIvbNYUOnZ","repository":"cerbos/spitfire","branch":"renovate/go-deps","msg":"gomod.updateArtifacts(hubctl/go.mod)","time":"2025-12-15T06:03:16.666Z","v":0}

[jamietanna]

Got a Job ID you can share for this?

[haines]

Thanks for looking into it - 019b203d-1c64-71ab-bf78-41f9f1077662

[jamietanna]

Can you confirm what happens when i.e. making the following diff locally:

-require tailscale.com v1.92.0
+require tailscale.com v1.92.1

Then running go mod tidy?

You may also want to set export GOTOOLCHAIN='auto' before running it, to make sure that it pulls the new toolchain automagically