From 19497eba0c78146a2c7119118957301e260f640a Mon Sep 17 00:00:00 2001
From: s1d3sw1ped_bot <12+s1d3sw1ped_bot@git.s1d3sw1ped.com>
Date: Mon, 31 Aug 2026 15:18:59 -0500
Subject: [PATCH] Pin CI to Go 1.26.7 and stable action tags.

setup-go@main plus go-version-file 1.26.0 was flaky (version: not found) and still scanned an unpatched 1.26.0 stdlib.
---
 .gitea/workflows/test-pr.yaml | 14 ++++++--------
 1 file changed, 6 insertions(+), 8 deletions(-)

diff --git a/.gitea/workflows/test-pr.yaml b/.gitea/workflows/test-pr.yaml
index a789933..b3e221c 100644
--- a/.gitea/workflows/test-pr.yaml
+++ b/.gitea/workflows/test-pr.yaml
@@ -9,11 +9,10 @@ jobs:
   check-and-test:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@main
-      - uses: actions/setup-go@main
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
         with:
-          go-version-file: 'go.mod'
-          check-latest: true
+          go-version: '1.26.7'
       - run: go mod tidy
       - run: go build ./...
       - run: go vet ./...
@@ -28,10 +27,9 @@ jobs:
   vulncheck:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@main
-      - uses: actions/setup-go@main
+      - uses: actions/checkout@v4
+      - uses: actions/setup-go@v5
         with:
-          go-version-file: 'go.mod'
-          check-latest: true
+          go-version: '1.26.7'
       - run: GOTOOLCHAIN=auto go install golang.org/x/vuln/cmd/govulncheck@latest
       - run: govulncheck ./...