From d2e1742f75d67a8df62ded34b8b5baee1b8d5e9d Mon Sep 17 00:00:00 2001
From: Fabio Bonelli <fb@fabiobonelli.it>
Date: Sat, 30 May 2026 10:28:52 +0200
Subject: [PATCH] ci: pin Go toolchain from go.mod and add go mod verify

---
 .github/workflows/lint.yml    | 2 +-
 .github/workflows/release.yml | 2 +-
 .github/workflows/tests.yml   | 3 ++-
 3 files changed, 4 insertions(+), 3 deletions(-)

diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml
index 081667c..faa6411 100644
--- a/.github/workflows/lint.yml
+++ b/.github/workflows/lint.yml
@@ -11,7 +11,7 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
-          go-version: "1.25"
+          go-version-file: go.mod
       - uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
         with:
           version: v2.11.3
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index c28f54e..ad9f7b4 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -17,7 +17,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
-          go-version: "1.25"
+          go-version-file: go.mod
         id: go
 
       # Needed to build multi-platform Docker images
diff --git a/.github/workflows/tests.yml b/.github/workflows/tests.yml
index 416243e..143bfac 100644
--- a/.github/workflows/tests.yml
+++ b/.github/workflows/tests.yml
@@ -11,7 +11,8 @@ jobs:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
-          go-version: "1.25"
+          go-version-file: go.mod
+      - run: go mod verify
       - run: go test -race -coverprofile=coverage.txt ./...
       - uses: golang/govulncheck-action@b625fbe08f3bccbe446d94fbf87fcc875a4f50ee # v1.0.4
         with: