From b6bd5303e01b27d7288b9510dcdea9c72857f656 Mon Sep 17 00:00:00 2001
From: Lukasz Raczylo <lukasz@raczylo.com>
Date: Fri, 2 Oct 2026 05:09:49 +0100
Subject: [PATCH] ci(security): resolve latest Go patch in govulncheck job

The govulncheck job fails on 17 standard library findings. The runner
uses an outdated Go toolchain. Set check-latest so setup-go installs
the newest patch release.
---
 .github/workflows/security.yaml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index 177ccf6..fb8eb2b 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -31,6 +31,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version-file: go.mod
+          check-latest: true
           cache: true
 
       - name: Install govulncheck