Update Go version reference in docs and update in Dockerfiles

Dockerfile

@@ -7,7 +7,7 @@
 # =============================================================================
 # Stage 1: Builder
 # =============================================================================
-FROM golang:1.25-alpine AS builder
+FROM golang:1.26-alpine AS builder
 
 # Install git for version info (optional) and ca-certificates
 RUN apk add --no-cache git ca-certificates

README.md

@@ -1,7 +1,7 @@
 <div align="center">
   <img width="1920" height="829" alt="chaperone_banner" src="https://github.com/user-attachments/assets/a4fbfb21-5776-4a03-a5b2-91586fa0b0c4" />
   <p align="center">
-    <a href="https://go.dev"><img src="https://img.shields.io/badge/Go-1.25+-00ADD8?style=flat&logo=go"></a>
+    <a href="https://go.dev"><img src="https://img.shields.io/badge/Go-1.26+-00ADD8?style=flat&logo=go"></a>
     <img src="https://img.shields.io/badge/License-Apache%202.0-blue.svg">
     <img src="https://github.com/cloudblue/chaperone/actions/workflows/ci.yml/badge.svg?branch=master">
   </div>
@@ -48,6 +48,8 @@ make tools && make build-dev
 ./bin/chaperone -config configs/getting-started.yaml
 ```
 
+Go version requirement is defined in `go.mod` (source of truth).
+
 ## Documentation
 
 | Document | Description |

docs/guides/deployment.md

@@ -16,7 +16,7 @@ it into a production-ready container.
 
 | Requirement | Version | Purpose |
 |-------------|---------|---------|
-| **Go** | 1.25+ | Building custom binaries |
+| **Go** | 1.26+ | Building custom binaries |
 | **Docker** | 20.10+ | Containerized deployment |
 | **A working plugin project** | — | From the [Plugin Development Guide](plugin-development.md) |
 
@@ -54,7 +54,7 @@ that compiles **your** code. This is the typical production scenario.
 Create `Dockerfile` in your plugin project root (`my-proxy/`):
 
 ```dockerfile
-FROM golang:1.25-alpine AS builder
+FROM golang:1.26-alpine AS builder
 WORKDIR /build
 
 # Copy your project and build.

docs/guides/plugin-development.md

@@ -18,10 +18,10 @@ plugin that injects a custom header into every proxied request.
 
 ## Prerequisites
 
-| Requirement | Version | Purpose |
-|-------------|---------|---------|
-| **Go** | 1.25+ | Building the plugin binary ([install Go](https://go.dev/doc/install)) |
-| **curl** | any | Sending test requests |
+| Requirement | Version                  | Purpose                                                         |
+| ----------- | ------------------------ | --------------------------------------------------------------- |
+| **Go**      | 1.26+                    | Building the plugin binary ([install Go](https://go.dev/doc/install)) |
+| **curl**    | any                      | Sending test requests                                           |
 
 > **Recommended:** Complete the [Getting Started](../getting-started.md)
 > tutorial first. It introduces the proxy, configuration, allow-lists,
@@ -71,7 +71,7 @@ This creates a `go.mod` like:
 ```go
 module github.com/acme/my-proxy
 
-go 1.25
+go 1.26
 
 require (
     github.com/cloudblue/chaperone     v0.1.0

docs/tutorials/microsoft-sam-mux.md

@@ -8,7 +8,7 @@ Build a Chaperone proxy that authenticates requests to Microsoft APIs using the
 
 | Requirement | Version | Purpose |
 |-------------|---------|---------|
-| **Go** | 1.25+ | Building the proxy binary ([install Go](https://go.dev/doc/install)) |
+| **Go** | 1.26+ | Building the proxy binary ([install Go](https://go.dev/doc/install)) |
 | **Chaperone source** | — | SDK, Core, and Contrib modules (cloned in [Getting Started](../getting-started.md)) |
 | **curl** | any | Sending test requests |
 | **Microsoft Entra ID app registration** | — | Client ID, client secret, and an account with admin consent permissions ([quickstart](https://learn.microsoft.com/en-us/entra/identity-platform/quickstart-register-app)) |

scripts/test-distributor-workflow.sh

@@ -17,7 +17,7 @@
 set -euo pipefail
 
 REPO_ROOT="$(cd "$(dirname "$0")/.." && pwd)"
-# Create a workspace under the user's home to avoid Go 1.25+ temp root
+# Create a workspace under the user's home to avoid system temp root
 # restrictions (Go ignores go.mod in system temp roots).
 WORK_DIR="${HOME}/.cache/chaperone-distributor-test"
 rm -rf "$WORK_DIR"

test/Dockerfile.echoserver

@@ -8,7 +8,7 @@
 # Used by: make docker-test
 # NOT a production artifact.
 
-FROM golang:1.25-alpine AS builder
+FROM golang:1.26-alpine AS builder
 
 WORKDIR /build