79f02d9868
v4 installs golangci-lint v1.64.8 (built with Go 1.24) which cannot lint a 1.26 module; v8 pulls v2.12. govulncheck@latest still fails to install on 1.26.7, so run that job on Go 1.27. Keep tests on push to main.