chore: bump dependencies, tooling, CI actions and base image

.github/workflows/docker.yml

@@ -8,20 +8,20 @@ jobs:
       packages: write
     steps:
       - id: dockermeta
-        uses: docker/metadata-action@v5
+        uses: docker/metadata-action@v6
         with:
           images: |
             ghcr.io/upsun/vinego
           tags: |
             type=semver,pattern={{version}}
-      - uses: docker/setup-buildx-action@v3
+      - uses: docker/setup-buildx-action@v4
       - if: ${{ startsWith(github.ref, 'refs/tags/v') }}
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
           password: ${{ secrets.GH_PUBLISH_DEVREL }}
-      - uses: docker/build-push-action@v5
+      - uses: docker/build-push-action@v7
         with:
           context: "{{defaultContext}}:src"
           push: ${{ startsWith(github.ref, 'refs/tags/v') }}

src/.custom-gcl.yml

@@ -1,4 +1,4 @@
-version: v2.13.1
+version: v2.13.2
 plugins:
   - module: 'github.com/upsun/vinego/src'
     path: .

src/Dockerfile

@@ -1,10 +1,10 @@
-FROM golang:1.27-bookworm
+FROM golang:1.27-trixie
 ADD . /src
 WORKDIR /src
 ENV GOPATH=/install
 RUN mkdir -p $GOPATH
 RUN cd /src
-RUN go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.13.1
+RUN go install github.com/golangci/golangci-lint/v2/cmd/golangci-lint@v2.13.2
 RUN $GOPATH/bin/golangci-lint custom -v
 RUN ./custom-gcl run
 RUN go test ./...
@@ -13,7 +13,7 @@ RUN go install golang.org/x/tools/cmd/goimports@latest
 RUN go install github.com/go-delve/delve/cmd/dlv@latest
 RUN go install honnef.co/go/tools/cmd/staticcheck@latest
 
-FROM golang:1.27-bookworm
+FROM golang:1.27-trixie
 COPY --from=0 /install/bin/* /bin/
 COPY --from=0 /src/custom-gcl /bin/golangci-lint
 RUN chmod +x /bin/*

src/go.mod

@@ -4,10 +4,10 @@ go 1.27
 
 require (
 	github.com/golangci/plugin-module-register v0.1.2
-	golang.org/x/tools v0.49.0
+	golang.org/x/tools v0.50.0
 )
 
 require (
-	golang.org/x/mod v0.40.0 // indirect
-	golang.org/x/sync v0.22.0 // indirect
+	golang.org/x/mod v0.41.0 // indirect
+	golang.org/x/sync v0.23.0 // indirect
 )

src/go.sum

@@ -2,9 +2,9 @@ github.com/golangci/plugin-module-register v0.1.2 h1:e5WM6PO6NIAEcij3B053CohVp3H
 github.com/golangci/plugin-module-register v0.1.2/go.mod h1:1+QGTsKBvAIvPvoY/os+G5eoqxWn70HYDm2uvUyGuVw=
 github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI=
 github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY=
-golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs=
-golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE=
-golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek=
-golang.org/x/sync v0.22.0/go.mod h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
-golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI=
-golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=
+golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c=
+golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
+golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
+golang.org/x/sync v0.23.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
+golang.org/x/tools v0.50.0 h1:c2ifzfcuY7L90lZ2aKd8S4K2NpASF08SZx9ZuJkHmSU=
+golang.org/x/tools v0.50.0/go.mod h1:7ulVMw3831Mwi5EZD6RomGyffr4VFjuNYXf2BbCEAV0=