Update dependency golangci/golangci-lint to v2.13.2

[renovate]

This PR contains the following updates:

Package	Update	Change
golangci/golangci-lint	minor	v2.12.2 → v2.13.2

---

Release Notes

golangci/golangci-lint (golangci/golangci-lint)

v2.13.2

Compare Source

Released on 2026-08-28

1. Bug fixes
   • Decrease cache entropy
2. Linters bug fixes
   • iface: from 1.5.0 to 1.5.1
   • staticcheck: from 0.8.0 to 0.8.1
   • unparam: from 3f964bc to 2fa3d84
   • canonicalheader: from v1.1.2 to a temporary fork

v2.13.1

Compare Source

Released on 2026-08-20

1. Linters bug fixes
   • ginkgolinter: from 0.23.1 to 0.24.0
   • gofmt: from d62b90e to e84e050
   • staticcheck: from 0.8.0-rc.1 to 0.8.0
   • wsl_v5: from 5.8.0 to 5.9.0

v2.13.0

Compare Source

Released on 2026-08-19

1. Enhancements
   • 🎉 go1.27 support
2. Bug fixes
   • fix: cache package facts
3. Linters new features or changes
   • dupword: from 0.1.7 to 0.1.8 (new option skip-raw-strings)
   • errcheck: from 1.10.0 to 1.20.0
   • exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)
   • exhaustruct: deprecated and replaced by exhaustruct_v5
   • fatcontext: from 0.9.0 to 0.10.0 (new options: check-loops, check-function-literals)
   • goconst: from 1.10.0 to 1.11.0 (new options: ignore-map-keys, exclude-types)
   • gofumpt: from 0.9.2 to 0.11.0 (new options: extra.group-params, extra.clothe-returns, extra.balance-calls)
   • gomoddirectives: from 0.8.0 to 0.9.0 (new option: replace-allow-all)
   • gosec: from 2.26.1 to 2.27.1
   • govet-modernize: from 0.44.0 to 0.49.0 (fmtappendf is removed. New analyzers atomictypes, embedlit, errorsastype, importcomment, reflecttypeassert, slicesclip, and slicesbackward. waitgroup is renamed waitgroupgo)
   • iface: from 1.4.3 to 1.5.0 (new analyzer: unusedmethod)
   • noinlineerr: from 1.0.5 to 1.0.6
   • nonamedreturns: from 1.0.6 to 1.0.8 (new option: allow-unused-named-returns)
   • recvcheck: from 0.2.0 to 0.3.0 (new default exclusions)
   • unparam: from 5beb8c8 to 3f964bc
4. Linters bug fixes
   • clickhouse-go-linter: from 1.2.0 to 1.2.1
   • errname: from 1.1.1 to 1.1.2
   • exhaustruct: from 5.0.2 to 5.0.3
   • funcorder: add missing Function field
   • ginkgolinter: from 0.23.0 to 0.23.1
   • gocheckcompilerdirectives: from 1.3.0 to 1.4.0
   • gocritic: from 0.14.3 to 0.14.4
   • gomoddirectives: add missing IgnoreForbidden field
   • iface: from 1.4.2 to 1.4.3
   • mirror: from 1.3.0 to 1.3.3
   • nilnil: from 1.1.1 to 1.1.2
   • protogetter: from 0.3.20 to 0.3.21

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[JAORMX]

@renovate rebase

[JAORMX]

No merge-blocking findings.\n\n- The one-line image-only bump is compatible with the Taskfile: 0 issues. invokes the Smart, fast linters runner.

Usage:
golangci-lint [flags]
golangci-lint [command]

Available Commands:
cache Cache control and information.
completion Generate the autocompletion script for the specified shell
config Configuration file information and verification.
custom Build a version of golangci-lint with custom linters.
fmt Format Go source files.
formatters List current formatters configuration.
help Display extra help
linters List current linters configuration.
migrate Migrate configuration file from v1 to v2.
run Lint the code.
version Display the golangci-lint version.

Flags:
--color string Use color when printing; can be 'always', 'auto', or 'never' (default "auto")
-h, --help Help for a command
-v, --verbose Verbose output
--version Print version

Use "golangci-lint [command] --help" for more information about a command. executable on PATH, and the v2.13.2 Linux amd64/arm64 release archives retain the expected filename/layout. The PR's Build Images check passed.\n- Upstream v2.13.0–v2.13.2 changes embedded linter versions (including staticcheck, errcheck, gosec, and unparam) plus cache behavior; no repository golangci configuration is present, and both CI lint matrix jobs pass. CI itself obtains its binary through golangci-lint-action rather than this guest image, so image-build success—not CI lint—is the direct validation of the changed download path.\n- Upstream metadata marks v2.13.2 immutable and publishes checksums and per-archive SBOMs. The Dockerfile still downloads and extracts the archive without verifying its published checksum; this predates the PR and should be tracked separately as supply-chain hardening, not block this Renovate update.\n\nChecked: required Test jobs (Ubuntu, macOS), both Lint jobs, both Build jobs, MCP integration, and Build Images are passing.

[JAORMX]

Correction to the approval text: the Taskfile lint target invokes the golangci-lint executable on PATH, and v2.13.2 preserves the Linux amd64/arm64 archive names and extraction layout expected by images/base/Dockerfile. The rest of the approval is unchanged.