ci(security): resolve latest Go patch in govulncheck job

The govulncheck job fails on 17 standard library findings. The runner uses an outdated Go toolchain. Set check-latest so setup-go installs the newest patch release.
2026-10-12 00:45:22 +00:00 · 2026-10-02 05:10:31 +01:00
1 changed files with 1 additions and 0 deletions
@@ -31,6 +31,7 @@ jobs:
        uses: actions/setup-go@v5
        with:
          go-version-file: go.mod
+          check-latest: true
          cache: true

      - name: Install govulncheck