Docker builds are now insulated from unexpected upstream breakages caused by floating dependency tags.
The build pipeline now explicitly requests version 3.26.0 of the Goose database migration tool, abandoning the risky @latest tag.
Recently, the newest Goose release (v3.27.0) bumped its minimum Go requirement to version 1.25. By locking the to the previous release, the build remains compatible with the project's existing Go 1.23 Alpine image without forcing a broader, potentially disruptive language upgrade.