chore: bump to Go 1.26, add dependabot config

Bump the Go version to 1.26 and add a dependabot configuration
for automated dependency updates (both Go modules and GitHub Actions).

Also removed the pinned golangci-lint version so it always uses the
latest from the action, avoiding manual maintenance on every release.

The release workflow now skips dependabot PRs since those don't need
snapshot builds.

Author: peterdeme

.github/dependabot.yml

@@ -0,0 +1,23 @@
+version: 2
+updates:
+  - package-ecosystem: github-actions
+    directory: /
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: "chore(deps)"
+    groups:
+      github-actions:
+        patterns:
+          - "*"
+
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: daily
+    commit-message:
+      prefix: "chore(deps)"
+    groups:
+      go-dependencies:
+        patterns:
+          - "*"

.github/workflows/lint.yml

@@ -37,4 +37,3 @@ jobs:
         uses: golangci/golangci-lint-action@v9
         with:
           args: --verbose
-          version: v2.7

.github/workflows/release.yml

@@ -9,6 +9,7 @@ concurrency:
 jobs:
   goreleaser:
     name: Release
+    if: github.actor != 'dependabot[bot]'
     runs-on: ubuntu-latest
     permissions:
       id-token: write

client/client.go

@@ -110,7 +110,7 @@ func (c *client) Do(req *http.Request) (*http.Response, error) {
 	req.URL.Host = u.Host
 
 	// execute request
-	resp, err := httpC.Do(req)
+	resp, err := httpC.Do(req) //nolint:gosec // URL is constructed from user-configured Spacelift endpoint, not untrusted input
 	if err != nil {
 		return nil, fmt.Errorf("error executing request: %w", err)
 	}

go.mod

@@ -1,6 +1,6 @@
 module github.com/spacelift-io/spacectl
 
-go 1.25.0
+go 1.26
 
 require (
 	github.com/Masterminds/semver/v3 v3.4.0

internal/cmd/graphql/mcp.go

@@ -309,15 +309,15 @@ func formatSchemaSummary(schema any) (*mcp.CallToolResult, error) {
 	if queryType.IsValid() {
 		fields := queryType.FieldByName("Fields")
 		if fields.IsValid() && fields.Len() > 0 {
-			summary.WriteString(fmt.Sprintf("Available Queries (%d):\n", fields.Len()))
+			fmt.Fprintf(&summary, "Available Queries (%d):\n", fields.Len())
 			for i := 0; i < fields.Len(); i++ {
 				field := fields.Index(i)
 				name := field.FieldByName("Name").String()
 				description := field.FieldByName("Description").String()
 				if description != "" {
-					summary.WriteString(fmt.Sprintf("  - %s: %s\n", name, description))
+					fmt.Fprintf(&summary, "  - %s: %s\n", name, description)
 				} else {
-					summary.WriteString(fmt.Sprintf("  - %s\n", name))
+					fmt.Fprintf(&summary, "  - %s\n", name)
 				}
 			}
 			summary.WriteString("\n")
@@ -329,15 +329,15 @@ func formatSchemaSummary(schema any) (*mcp.CallToolResult, error) {
 	if mutationType.IsValid() && !mutationType.IsNil() {
 		fields := mutationType.Elem().FieldByName("Fields")
 		if fields.IsValid() && fields.Len() > 0 {
-			summary.WriteString(fmt.Sprintf("Available Mutations (%d):\n", fields.Len()))
+			fmt.Fprintf(&summary, "Available Mutations (%d):\n", fields.Len())
 			for i := 0; i < fields.Len(); i++ {
 				field := fields.Index(i)
 				name := field.FieldByName("Name").String()
 				description := field.FieldByName("Description").String()
 				if description != "" {
-					summary.WriteString(fmt.Sprintf("  - %s: %s\n", name, description))
+					fmt.Fprintf(&summary, "  - %s: %s\n", name, description)
 				} else {
-					summary.WriteString(fmt.Sprintf("  - %s\n", name))
+					fmt.Fprintf(&summary, "  - %s\n", name)
 				}
 			}
 			summary.WriteString("\n")
@@ -371,17 +371,17 @@ func formatSchemaSummary(schema any) (*mcp.CallToolResult, error) {
 
 		if len(objectTypes) > 0 {
 			sort.Strings(objectTypes)
-			summary.WriteString(fmt.Sprintf("Object Types (%d): %s\n\n", len(objectTypes), strings.Join(objectTypes, ", ")))
+			fmt.Fprintf(&summary, "Object Types (%d): %s\n\n", len(objectTypes), strings.Join(objectTypes, ", "))
 		}
 
 		if len(enumTypes) > 0 {
 			sort.Strings(enumTypes)
-			summary.WriteString(fmt.Sprintf("Enum Types (%d): %s\n\n", len(enumTypes), strings.Join(enumTypes, ", ")))
+			fmt.Fprintf(&summary, "Enum Types (%d): %s\n\n", len(enumTypes), strings.Join(enumTypes, ", "))
 		}
 
 		if len(scalarTypes) > 0 {
 			sort.Strings(scalarTypes)
-			summary.WriteString(fmt.Sprintf("Scalar Types (%d): %s\n\n", len(scalarTypes), strings.Join(scalarTypes, ", ")))
+			fmt.Fprintf(&summary, "Scalar Types (%d): %s\n\n", len(scalarTypes), strings.Join(scalarTypes, ", "))
 		}
 	}
 

internal/cmd/module/search_version.go

@@ -105,7 +105,7 @@ func getSearchModuleVersions(ctx context.Context, cliCmd *cli.Command, cursor st
 	if err := authenticated.Client().Query(ctx, &query, map[string]interface{}{
 		"id": cliCmd.String(flagModuleID.Name),
 		"input": structs.SearchInput{
-			First: graphql.NewInt(graphql.Int(int32(limit))), //nolint: gosec
+			First: graphql.NewInt(graphql.Int(int32(limit))), //nolint:gosec
 			After: after,
 			OrderBy: &structs.QueryOrder{
 				Field:     "createdAt",