chore: upgrade go to 1.26.4

[jiparis]

Upgrades the Go toolchain from 1.26.3 to 1.26.4.

This bumps the go directive in the main module, the pinned golang base images in the release Dockerfiles (controlplane, cli, artifact-cas), and the documentation reference.

Assisted-by: Claude Code

[chainloop-platform]

AI Session Analysis

Avg score	Sessions	Failing policies	Attribution	Files	Lines	Total Duration
🟡 60%	1	✅ 0	100% AI / 0% Human	5	+5 / -5	22m59s

🟡 60% — 100% AI — ✅ All policies passing

Jun 8, 2026 09:47 UTC · 22m59s · $5.81 · 71.3k in / 32.0k out · claude-code 2.1.156 (claude-opus-4-8)

View session details ↗

Change Summary

• Bumps go.mod from go 1.26.3 to go 1.26.4.
• Updates three .goreleaser Dockerfiles to golang:1.26.4 with the new digest.
• Updates CLAUDE.md and verifies the bump with go mod tidy, go build, and app tests.

AI Session Overall Score

🟡 60% — Strong execution, but the user's PR request was left unfinished.

AI Session Analysis Breakdown

🟢 96% · scope-discipline

🟢 Git status showed only the five planned version files changed. · High Impact

🟢 95% · context-and-planning

🟢 AI wrote a scoped plan before edits, including exclusions and verification. · High Impact

🟢 92% · solution-quality

No notes.

🟢 90% · user-trust-signal

No notes.

🟢 88% · verification

🟢 AI ran go mod tidy, go build, and both app test commands. · High Impact

🔴 35% · alignment

🔴 User asked for PR creation, but the session ended after commit and branch push only. · High Severity

💡 When asked for a PR, run the PR creation step or state that you can only prepare the branch.

---

File Attribution

████████████████████ 100% AI / 0% Human

Status	Attribution	File	Lines
modified	ai	CLAUDE.md	+1 / -1
modified	ai	app/artifact-cas/Dockerfile.goreleaser	+1 / -1
modified	ai	app/cli/Dockerfile.goreleaser	+1 / -1
modified	ai	app/controlplane/Dockerfile.goreleaser	+1 / -1
modified	ai	go.mod	+1 / -1

---

Policies (4)

Status	Policy	Material	Messages
✅ Passed	ai-config-ai-agents-allowed	ai-coding-session-ea3301	-
✅ Passed	ai-config-no-dangerous-commands	ai-coding-session-ea3301	-
✅ Passed	ai-config-no-secrets	ai-coding-session-ea3301	-
✅ Passed	ai-config-mcp-servers-allowed	ai-coding-session-ea3301	-

---

Powered by Chainloop and Chainloop Trace

[cubic-dev-ai]

No issues found across 5 files

_{Re-trigger cubic}