chore(deps): bump actions/setup-go from 5 to 6

[dependabot]

Bumps actions/setup-go from 5 to 6.

Release notes

Sourced from actions/setup-go's releases.

v6.0.0

What's Changed

Breaking Changes

• Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @​matthewhughes934 in actions/setup-go#460
• Upgrade Nodejs runtime from node20 to node 24 by @​salmanmkc in actions/setup-go#624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

• Upgrade @​types/jest from 29.5.12 to 29.5.14 by @​dependabot[bot] in actions/setup-go#589
• Upgrade @​actions/tool-cache from 2.0.1 to 2.0.2 by @​dependabot[bot] in actions/setup-go#591
• Upgrade @​typescript-eslint/parser from 8.31.1 to 8.35.1 by @​dependabot[bot] in actions/setup-go#590
• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in actions/setup-go#594
• Upgrade typescript from 5.4.2 to 5.8.3 by @​dependabot[bot] in actions/setup-go#538
• Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @​dependabot[bot] in actions/setup-go#603
• Upgrade form-data to bring in fix for critical vulnerability by @​matthewhughes934 in actions/setup-go#618
• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in actions/setup-go#631

New Contributors

• @​matthewhughes934 made their first contribution in actions/setup-go#618
• @​salmanmkc made their first contribution in actions/setup-go#624

Full Changelog: actions/setup-go@v5...v6.0.0

v5.5.0

What's Changed

Bug fixes:

• Update self-hosted environment validation by @​priyagupta108 in actions/setup-go#556
• Add manifest validation and improve error handling by @​priyagupta108 in actions/setup-go#586
• Update template link by @​jsoref in actions/setup-go#527

Dependency updates:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in actions/setup-go#574
• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in actions/setup-go#573
• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in actions/setup-go#582
• Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @​dependabot in actions/setup-go#537

New Contributors

• @​jsoref made their first contribution in actions/setup-go#527

Full Changelog: actions/setup-go@v5...v5.5.0

v5.4.0

What's Changed

Dependency updates :

• Upgrade semver from 7.6.0 to 7.6.3 by @​dependabot in actions/setup-go#535
• Upgrade eslint-config-prettier from 8.10.0 to 10.0.1 by @​dependabot in actions/setup-go#536
• Upgrade @​action/cache from 4.0.0 to 4.0.2 by @​aparnajyothi-y in actions/setup-go#568
• Upgrade undici from 5.28.4 to 5.28.5 by @​dependabot in actions/setup-go#541

... (truncated)

Commits

• 4469467 Bump actions/checkout from 4 to 5 (#631)
• e093d1e Node 24 upgrade (#624)
• 1d76b95 Improve toolchain handling (#460)
• e75c3e8 Bump form-data to bring in fix for critical vulnerability (#618)
• 8e57b58 Bump eslint-plugin-jest from 28.11.0 to 29.0.1 (#603)
• 7c0b336 Bump typescript from 5.4.2 to 5.8.3 (#538)
• 6f26dcc Bump undici from 5.28.5 to 5.29.0 (#594)
• 8d4083a Bump @​typescript-eslint/parser from 5.62.0 to 8.32.0 (#590)
• fa96338 Bump @​actions/tool-cache from 2.0.1 to 2.0.2 (#591)
• 4de67c0 Bump @​types/jest from 29.5.12 to 29.5.14 (#589)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Upgraded CI workflows to use the latest Go toolchain setup across the board (builds on macOS/Ubuntu, Docker image builds, linting, release pipelines, manual release, and unit tests).
  • Improves reliability, performance, and future compatibility of the automation environment.
  • No changes to app features or behavior; end-users are unaffected.

[coderabbitai]

Walkthrough

Bumps actions/setup-go from v5 to v6 across multiple GitHub Actions workflows. No other workflow logic, inputs, or control flow changes.

Changes

Cohort / File(s)	Summary of changes
Single-step bump .github/workflows/butterflynet.yml, .github/workflows/go-lint.yml, .github/workflows/release.yml, .github/workflows/release_dispatch.yml, .github/workflows/rust-lint.yml	Replace actions/setup-go@v5 with actions/setup-go@v6 in one step within each workflow.
Two-step bump .github/workflows/docker.yml, .github/workflows/unit-tests.yml	Replace actions/setup-go@v5 with actions/setup-go@v6 in two steps across the workflow(s).
Three-step bump .github/workflows/forest.yml	Replace actions/setup-go@v5 with actions/setup-go@v6 in three steps (macOS build, Ubuntu build, cargo-publish-dry-run).

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested reviewers

• elmattic
• akaladarshi
• sudo-shashank

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title Check	✅ Passed	The title “chore(deps): bump actions/setup-go from 5 to 6” cleanly and precisely summarizes the primary change of the pull request, namely updating the GitHub Actions setup-go dependency from version 5 to version 6, without extraneous details or ambiguity.
Docstring Coverage	✅ Passed	No functions found in the changes. Docstring coverage check skipped.

✨ Finishing touches

🧪 Generate unit tests

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch dependabot/github_actions/actions/setup-go-6

---

📜 Recent review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between ac8cd71 and 973cdc0.

📒 Files selected for processing (8)

• .github/workflows/butterflynet.yml (1 hunks)
• .github/workflows/docker.yml (2 hunks)
• .github/workflows/forest.yml (3 hunks)
• .github/workflows/go-lint.yml (1 hunks)
• .github/workflows/release.yml (1 hunks)
• .github/workflows/release_dispatch.yml (1 hunks)
• .github/workflows/rust-lint.yml (1 hunks)
• .github/workflows/unit-tests.yml (2 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (7)

• GitHub Check: tests
• GitHub Check: tests-release
• GitHub Check: All lint checks
• GitHub Check: cargo-publish-dry-run
• GitHub Check: Build MacOS
• GitHub Check: Build Ubuntu
• GitHub Check: Build forest binaries on Linux AMD64

🔇 Additional comments (4)

.github/workflows/rust-lint.yml (1)

53-55: Confirm runners meet setup-go v6 requirements.

actions/setup-go@v6 now runs on Node 24 and needs runner version ≥ 2.327.1. Please double-check any self-hosted runners (especially the ARM pool) are already at or above that version and that downstream actions tolerate the Node 24 runtime before we merge. (newreleases.io)

.github/workflows/unit-tests.yml (1)

49-80: LGTM

Both unit-test jobs keep the same inputs, so the version bump is straightforward.

.github/workflows/go-lint.yml (1)

38-40: LGTM

Version bump looks good; no other workflow logic changed.

.github/workflows/forest.yml (1)

56-110: Use the runner.version context for verification.

actions/setup-go@v6 requires the Node 24 runtime and thus GitHub Actions runner v2.327.1 or later. Please confirm your BuildJet buildjet-8vcpu-ubuntu-2204 (and any self-hosted) images meet this requirement and aren’t on macOS ≤ 13.4 or ARM32. You can verify by adding a step in each affected job:

- name: Print runner version
  run: echo "Runner version: ${{ runner.version }}"

Ensure the output is ≥ 2.327.1 before rolling out v6.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}