Bump Go to 1.26.6, go-billy/v5@5.9.1, go-git/v5@5.19.2

[petruki]

This pull request updates the project to use Go version 1.26.6 and applies several dependency and CI workflow upgrades to keep the codebase secure and up-to-date. The most important changes are summarized below:

Go Version and Dependency Upgrades:

• Updated Go version from 1.26.5 to 1.26.6 across all relevant files, including Dockerfile, .devcontainer/Dockerfile, workflow YAMLs, and go.mod, ensuring consistency and access to the latest Go features and fixes. [1] [2] [3] [4] [5] [6] [7]
• Upgraded several Go module dependencies to their latest patch versions in go.mod, including go-git, go-billy, cloudflare/circl, klauspost/compress, golang.org/x/crypto, golang.org/x/net, golang.org/x/text, and updated a replace directive for goproxy. [1] [2] [3]

CI/CD Workflow Improvements:

• Updated GitHub Actions workflows to use the latest actions/setup-go@v7 instead of v6, and bumped the Go version in all jobs. [1] [2] [3] [4]
• Upgraded the SonarQube scan action from v8.2.0 to v8.2.1 in CI workflows for improved scanning and compatibility. [1] [2]
• Updated the vulnerability check tool govulncheck from version v1.6.0 to v1.7.0 and its install reference, in both the Makefile and GitHub Actions workflows, to improve security scanning. [1] [2] [3]

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud