Bump Go toolchain to 1.26.4 and slack-go to v0.23.1 to fix CVEs (#113)

Remediates the open vulnerabilities Vanta flagged against the kubewatch
image:

- Pin the build image to golang:1.26.4 and set the go.mod toolchain to
  go1.26.4 so the binary is compiled with a patched standard library.
  Fixes 14 Go stdlib CVEs (CVE-2026-33811/33814/39817/39819/39820/
  39823/39825/39826/39836/42499/42501/42504/42507, CVE-2026-27145).
- Upgrade github.com/slack-go/slack v0.6.5 -> v0.23.1.
  Fixes GHSA-gxhx-2686-5h9g. The APIs in use (slack.New, PostMessage,
  MsgOption*, WebhookMessage, PostWebhook) are unchanged.

Co-authored-by: Claude Opus 4.8 <[email protected]>

ROB-3783 patch 6 high CVEs (Go stdlib + glibc) (#111)

* add claude skill

Signed-off-by: Roi Glinik <[email protected]>

* FIX: patch CVE-2026-32280, CVE-2026-32281, CVE-2026-32283, CVE-2026-33810, CVE-2026-4046, CVE-2026-4437

- Upgrade Go builder from 1.26 to 1.26.2 (fixes 4 stdlib CVEs in crypto/x509 and crypto/tls)
- go.mod bumped to go 1.26.2 to match builder
- Fresh pull of cgr.dev/chainguard/bash:latest provides glibc >= 2.44 (fixes CVE-2026-4046, CVE-2026-4437)
- Verified: docker scout reports 0C 0H 0M 0L on rebuilt image

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

* add upgrade guidelines to patch-cves skill per PR review

Co-Authored-By: Claude Sonnet 4.6 <[email protected]>

---------

Signed-off-by: Roi Glinik <[email protected]>
Co-authored-by: Claude Sonnet 4.6 <[email protected]>

FIX: patch CVE-2025-68121 (#110)

Add missing metrics file (#106)

update packages (#102)

Update GO version and dependencies (#99)

Update Go version and dependencies 
---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Roi Glinik <[email protected]>

Add events count and export metrics (#86)

* add support for CRDs

* Fixed usage of ListWatch and WatchFunc for conf.CustomResources; removed unused fmt import from config/config.go

* Added rbac style permissions for custom resources

* Updated yaml files to use customresources; Added to readme Working with CRDs section

* Added kubewatchEventsMetrics and /metrics endpoint

* Removed depricated io/ioutil functions

* Added LISTEN_ADDRESS as env to set metrics endpoint

* Updated Metrics docs

* small readme fix

---------

Co-authored-by: Robusta Runner <[email protected]>
Co-authored-by: Robusta Runner <[email protected]>

add support for CRDs (#76)

* add support for CRDs

* Fixed usage of ListWatch and WatchFunc for conf.CustomResources; removed unused fmt import from config/config.go

* Added rbac style permissions for custom resources

* Updated yaml files to use customresources; Added to readme Working with CRDs section

* update chart version
update chart image

---------

Co-authored-by: Dima Chievtaiev <[email protected]>
Co-authored-by: Robusta Runner <[email protected]>
Co-authored-by: arik <[email protected]>

Merge pull request #75 from robusta-dev/changing_repo

Updating kubewatch repo

Merge pull request #71 from robusta-dev/dependabot/go_modules/golang.…

…org/x/crypto-0.17.0

Bump golang.org/x/crypto from 0.8.0 to 0.17.0