Update govulncheck dependency to golang.org/x/vuln v1.6.0

[Copilot]

This updates the repository’s govulncheck dependency from golang.org/x/vuln v1.5.0 to v1.6.0. Because this is a minor update to a security-scanning tool, the change keeps the module metadata aligned with the new release and its resolved golang.org/x/* dependency set.

• Dependency update

  • Bump golang.org/x/vuln from v1.5.0 to v1.6.0 in go.mod
  • Refresh go.sum to match the new module graph

• Resolved transitive updates

  • Accept the golang.org/x/* version moves selected by v1.6.0, including:
    • golang.org/x/mod
    • golang.org/x/sync
    • golang.org/x/tools
    • related indirect x/* modules required by the updated graph

• Govulncheck integration surface

  • No repository code paths or Makefile entry points were changed
  • Existing govulncheck usage remains the same, for example:

go run -mod=readonly golang.org/x/vuln/cmd/govulncheck -format sarif ./...

[Copilot]

Pull request overview

Updates govulncheck to v1.6.0 and aligns its transitive Go dependencies.

Changes:

• Bumps golang.org/x/vuln to v1.6.0.
• Refreshes related golang.org/x/* versions and checksums.

Show a summary per file

File	Description
go.mod	Updates govulncheck and its resolved dependencies.
go.sum	Refreshes checksums for the updated module graph.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 1/2 changed files
• Comments generated: 0
• Review effort level: Medium

[github-actions]

PR Triage

Field	Value
Category	chore
Risk	Low
Score	52/100
Action	auto_merge

Score breakdown: Impact 22 · Urgency 18 · Quality 12

Minor govulncheck dependency bump (v1.5.0 -> v1.6.0), only go.mod/go.sum changed, CI passing. Low risk; candidate for auto-merge.

Generated by 🔧 PR Triage Agent · 226.8 AIC · ⌖ 5.86 AIC · ⊞ 5.4K · ◷

[github-actions]

🤖 PR Triage Report

Field	Value
Category	chore
Risk	🟢 Low
Priority Score	48/100 (Impact: 10, Urgency: 20, Quality: 18)
Recommended Action	auto_merge ✅

Rationale: Routine dep bump of golang.org/x/vuln v1.5.0 → v1.6.0 (security scanner). 2 files changed, CI passing (51 checks ✅). No review requested yet — safe to auto-merge after CODEOWNERS approval.

Run §29115410581

Generated by 🔧 PR Triage Agent · 226.8 AIC · ⌖ 5.86 AIC · ⊞ 5.4K · ◷

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.82.8