gosec govulncheck runs (#1)

* gosec govulncheck runs

* Fix flaky TestRateLimiter_Matrix test

The test was failing due to two issues:
1. Test name generation used invalid character conversion (string(rune('0'+limit)))
   which produced non-printable characters for limits >= 10
2. Using 10ms windows with 100 requests caused race conditions - early requests
   would expire before all 100 were made, allowing the 101st request

Changed to use struct-based test cases with proper fmt.Sprintf naming and
a consistent 1-second window that won't expire during rapid test execution.

internal/version/checker.go

@@ -76,6 +76,7 @@ func (c *Checker) CheckForUpdate(ctx context.Context) *UpdateInfo {
 
 // fetchLatestRelease fetches the latest release info from GitHub API
 func (c *Checker) fetchLatestRelease(ctx context.Context) (*ReleaseInfo, error) {
+	// #nosec G107 -- URL is constructed from hardcoded constant and validated owner/repo
 	url := fmt.Sprintf(githubReleasesURL, c.owner, c.repo)
 
 	req, err := http.NewRequestWithContext(ctx, http.MethodGet, url, nil)
@@ -145,15 +146,9 @@ func parseVersion(v string) []int {
 
 	for _, p := range parts {
 		var num int
-		fmt.Sscanf(p, "%d", &num)
+		_, _ = fmt.Sscanf(p, "%d", &num)
 		result = append(result, num)
 	}
 
 	return result
 }
-
-// FormatUpdateMessage formats a user-friendly update notification
-func (u *UpdateInfo) FormatUpdateMessage() string {
-	return fmt.Sprintf("New version available: %s (current: %s) - %s",
-		u.LatestVersion, u.CurrentVersion, u.ReleaseURL)
-}

internal/version/checker_test.go

@@ -76,19 +76,6 @@ func TestIsNewerVersion(t *testing.T) {
 	}
 }
 
-func TestUpdateInfo_FormatUpdateMessage(t *testing.T) {
-	info := &UpdateInfo{
-		CurrentVersion: "1.0.0",
-		LatestVersion:  "1.1.0",
-		ReleaseURL:     "https://github.com/lukaszraczylo/lolcathost/releases/tag/v1.1.0",
-	}
-
-	msg := info.FormatUpdateMessage()
-	assert.Contains(t, msg, "1.0.0")
-	assert.Contains(t, msg, "1.1.0")
-	assert.Contains(t, msg, "https://github.com")
-}
-
 func TestNewChecker(t *testing.T) {
 	checker := NewChecker("lukaszraczylo", "lolcathost", "v1.0.0")