ci: bump golangci lint

.github/workflows/ci-outpost.yml

@@ -38,11 +38,6 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v8
         with:
-          # latest (v2.13.0) bundles honnef.co/go/tools v0.8.0-rc.1, whose nilness
-          # analyzer panics on getsentry/sentry-go ("unhandled builtin recover",
-          # https://github.com/dominikh/go-tools/issues/1725). Unpin once a
-          # release with the fix ships.
-          version: v2.12.2
           args: --timeout 5000s --verbose
           skip-cache: true
   test-unittest:

go.mod

@@ -1,6 +1,6 @@
 module goauthentik.io
 
-go 1.26.0
+go 1.27.0
 
 require (
 	beryju.io/ldap v0.2.2

internal/utils/tls.go

@@ -7,16 +7,15 @@ import (
 
 func GetTLSConfig() *tls.Config {
 	// Based on
-	// https://ssl-config.mozilla.org/#server=go&version=1.25&config=intermediate&guideline=5.7
+	// https://configurator.tlsref.org/#server=go&version=1.27&config=intermediate&hsts&guideline=6.0
 	tlsConfig := &tls.Config{
 		MinVersion: tls.VersionTLS12,
 		CurvePreferences: []tls.CurveID{
 			tls.X25519,
 			tls.CurveP256,
 			tls.CurveP384,
 		},
-		PreferServerCipherSuites: true,
-		CipherSuites:             []uint16{},
+		CipherSuites: []uint16{},
 	}
 
 	excludedCiphers := []uint16{