build: upgrade to Go 1.25 and golangci-lint 2.x

- Bump Go version to 1.25.7
- Upgrade golangci-lint to v2.9.0 and migrate config to v2 schema
- Move goimports from linter to formatter section
- Add govet shadow check
- Update CircleCI and GitHub Actions Go versions
- Upgrade golangci-lint-action to v9
- Add ST1005 exclusion for existing error strings

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: thomasschafer

.circleci/config.yml

@@ -6,7 +6,7 @@ orbs:
 go_image: &go_image
   resource_class: small
   docker:
-    - image: cimg/go:1.23
+    - image: cimg/go:1.25
 
 jobs:
   security-scans:

.github/workflows/ci.yml

@@ -14,10 +14,12 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v3
       with:
-        go-version: 1.23.2
+        go-version: '1.25'
 
     - name: Lint
-      uses: golangci/golangci-lint-action@v3
+      uses: golangci/golangci-lint-action@v9
+      with:
+        version: v2.9.0
 
     - name: Build
       run: go build -v -o parlay

.github/workflows/release.yml

@@ -21,7 +21,7 @@ jobs:
         name: Set up Go
         uses: actions/setup-go@v4
         with:
-          go-version: 1.23
+          go-version: '1.25'
           check-latest: true
       - run: go version
       - name: Install Syft

.github/workflows/security.yml

@@ -24,7 +24,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v3
       with:
-        go-version: 1.23
+        go-version: '1.25'
 
     - uses: snyk/actions/setup@master
 

.golangci.yaml

@@ -1,30 +1,44 @@
+version: "2"
 run:
   issues-exit-code: 1
-  color: always
-  max-same-issues: 0
-  max-issues-per-linter: 0
   tests: true
-  timeout: 5m
-
 linters:
   enable:
-    - errcheck
-    - goimports
-    - gosimple
-    - govet
-    - ineffassign
     - misspell
-    - staticcheck
-    - typecheck
-    - unused
-
-linters-settings:
-  errcheck:
-    check-blank: true
-    check-type-assertions: true
-  govet:
-    check-shadowing: true
-  goimports:
-    local-prefixes: github.com/snyk/parlay
-  misspell:
-    locale: US
+  settings:
+    errcheck:
+      check-type-assertions: true
+      check-blank: true
+    govet:
+      enable:
+        - shadow
+    misspell:
+      locale: US
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    rules:
+      - linters:
+          - staticcheck
+        text: "ST1005:"
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+formatters:
+  enable:
+    - goimports
+  settings:
+    goimports:
+      local-prefixes:
+        - github.com/snyk/parlay
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$

go.mod

@@ -1,6 +1,6 @@
 module github.com/snyk/parlay
 
-go 1.23
+go 1.25.7
 
 require (
 	github.com/CycloneDX/cyclonedx-go v0.9.2