chore: upgrade Go/deps/workflows to latest and fix gosec regressions (#193)

.github/workflows/ci.yml

@@ -19,10 +19,13 @@ jobs:
           fetch-depth: 0
       - name: Set up Go
         uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6.3.0
+        with:
+          go-version-file: "go.mod"
+          check-latest: true
       - name: Run golangci-lint
         uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
         with:
-          version: v2.7.2
+          version: v2.11.3
       - name: Setup Node.js for EditorConfig tools
         uses: actions/setup-node@53b83947a5a98c8d113130e565377fae1a50d02f # v6.3.0
         with:

.github/workflows/commitlint.yml

@@ -30,7 +30,7 @@ jobs:
 
       - name: Install commitlint
         run: |
-          npm install --save-dev @commitlint/cli@19.6.1 @commitlint/config-conventional@19.6.0
+          npm install --save-dev @commitlint/cli@20.4.3 @commitlint/config-conventional@20.4.3
 
       - name: Validate current commit (for single commits)
         if: github.event_name == 'push'