chore(go): update supported Go versions to 1.25.8 and 1.26.1 (#1583)

* chore(go): update supported Go versions to 1.25.8 and 1.26.1

* test(g117): persist BurntSushi toml dependency for sample builds

Author: ccojocar

.github/workflows/ci.yml

@@ -11,9 +11,9 @@ jobs:
     strategy:
       matrix:
         version:
-          - go-version: "1.25.7"
+          - go-version: "1.25.8"
             golangci: "latest"
-          - go-version: "1.26.0"
+          - go-version: "1.26.1"
             golangci: "latest"
     runs-on: ubuntu-latest
     env:
@@ -52,7 +52,7 @@ jobs:
       - name: Setup go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26.0"
+          go-version: "1.26.1"
       - name: Checkout Source
         uses: actions/checkout@v6
       - uses: actions/cache@v5
@@ -72,7 +72,7 @@ jobs:
       - name: Setup go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26.0"
+          go-version: "1.26.1"
       - name: Checkout Source
         uses: actions/checkout@v6
       - uses: actions/cache@v5

.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v6
         with:
-          go-version: "1.26.0"
+          go-version: "1.26.1"
       - name: Install Cosign
         uses: sigstore/cosign-installer@v4.0.0
         with:

go.mod

@@ -1,6 +1,7 @@
 module github.com/securego/gosec/v2
 
 require (
+	github.com/BurntSushi/toml v0.3.1
 	github.com/anthropics/anthropic-sdk-go v1.26.0
 	github.com/ccojocar/zxcvbn-go v1.0.4
 	github.com/google/uuid v1.6.0

go.sum

@@ -39,6 +39,7 @@ cloud.google.com/go/storage v1.6.0/go.mod h1:N7U0C8pVQ/+NIKOBQyamJIeKQKkZ+mxpohl
 cloud.google.com/go/storage v1.8.0/go.mod h1:Wv1Oy7z6Yz3DshWRJFhqM/UCfaWIRTdp0RXyy7KQOVs=
 contrib.go.opencensus.io/exporter/stackdriver v0.13.4/go.mod h1:aXENhDJ1Y4lIg4EUaVTwzvYETVNZk10Pu26tevFKLUc=
 dmitri.shuralyov.com/gpu/mtl v0.0.0-20190408044501-666a987793e9/go.mod h1:H6x//7gZCb22OMCxBHrMx7a5I7Hp++hsVxbQ4BYO7hU=
+github.com/BurntSushi/toml v0.3.1 h1:WXkYYl6Yr3qBf1K79EBnL4mak0OimBfB0XUf9Vl28OQ=
 github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU=
 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo=
 github.com/Masterminds/goutils v1.1.0/go.mod h1:8cTjp+g8YejhMuvIA5y2vz3BpJxksy863GQaJW2MFNU=

testutils/deps_test.go

@@ -0,0 +1,6 @@
+package testutils
+
+import (
+	// Keep TOML encoder dependency used by G117 test samples in go.mod/go.sum.
+	_ "github.com/BurntSushi/toml"
+)