chore(deps): Update github-actions (#629)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-go](https://redirect.github.com/actions/setup-go) ([changelog](https://redirect.github.com/actions/setup-go/compare/4b73464bb391d4059bd26b0524d20df3927bd417..4a3601121dd01d1626a1e23e37211e3254c1c06c)) | action | digest | `4b73464` → `4a36011` |
| [golangci/golangci-lint](https://redirect.github.com/golangci/golangci-lint) | uses-with | minor | `v2.10.1` → `v2.11.4` |

---

### Release Notes

<details>
<summary>golangci/golangci-lint (golangci/golangci-lint)</summary>

### [`v2.11.4`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2114)

[Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.3...v2.11.4)

*Released on 2026-03-22*

1. Linters bug fixes
   - `govet-modernize`: from 0.42.0 to 0.43.0
   - `noctx`: from 0.5.0 to 0.5.1
   - `sqlclosecheck`: from 0.5.1 to 0.6.0

### [`v2.11.3`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2113)

[Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.2...v2.11.3)

*Released on 2026-03-10*

1. Linters bug fixes
   - `gosec`: from v2.24.7 to [`619ce21`](https://redirect.github.com/golangci/golangci-lint/commit/619ce2117e08)

### [`v2.11.2`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2112)

[Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.1...v2.11.2)

*Released on 2026-03-07*

1. Fixes
   - `fmt`: fix error when using the `fmt` command with explicit paths.

### [`v2.11.1`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2111)

[Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.0...v2.11.1)

*Released on 2026-03-06*

Due to an error related to AUR, some artifacts of the v2.11.0 release have not been published.

This release contains the same things as v2.11.0.

### [`v2.11.0`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2110)

[Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.10.1...v2.11.0)

*Released on 2026-03-06*

1. Linters new features or changes
   - `errcheck`: from 1.9.0 to 1.10.0 (exclude `crypto/rand.Read` by default)
   - `gosec`: from 2.23.0 to 2.24.6 (new rules: `G113`, `G118`, `G119`, `G120`, `G121`, `G122`, `G123`, `G408`, `G707`)
   - `noctx`: from 0.4.0 to 0.5.0 (new detection: `httptest.NewRequestWithContext`)
   - `prealloc`: from 1.0.2 to 1.1.0
   - `revive`: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related checks moved from `var-naming` to a new rule `package-naming`)
2. Linters bug fixes
   - `gocognit`: from 1.2.0 to 1.2.1
   - `gosec`: from 2.24.6 to 2.24.7
   - `unqueryvet`: from 1.5.3 to 1.5.4

</details>

---

### Configuration

📅 **Schedule**: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box

---

This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42My4wIiwidXBkYXRlZEluVmVyIjoiNDMuNjMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiYXV0b21lcmdlIl19-->

Author: cloudquery-ci[bot]

.github/workflows/lint_golang.yml

@@ -16,7 +16,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         id: go
         with:
           go-version-file: go.mod
@@ -34,5 +34,5 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9
         with:
-          version: v2.10.1
+          version: v2.11.4
           args: --verbose

.github/workflows/regen.yml

@@ -21,7 +21,7 @@ jobs:
           permission-contents: write
           permission-pull-requests: write
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
-      - uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
+      - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         id: go
         with:
           go-version-file: go.mod

.github/workflows/unittest.yml

@@ -22,7 +22,7 @@ jobs:
       - name: Check out code into the Go module directory
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6
       - name: Set up Go 1.x
-        uses: actions/setup-go@4b73464bb391d4059bd26b0524d20df3927bd417 # v6
+        uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6
         with:
           go-version-file: go.mod
       - run: go mod download

managedplugin/docker.go

@@ -73,10 +73,8 @@ func (pr *dockerProgressReader) Read(_ []byte) (n int, err error) {
 }
 
 func newDockerClient(options ...client.Opt) (*client.Client, error) {
-	defaultOptions := []client.Opt{
-		client.FromEnv,
-		client.WithAPIVersionNegotiation(),
-	}
+	defaultOptions := make([]client.Opt, 0, 2+len(options))
+	defaultOptions = append(defaultOptions, client.FromEnv, client.WithAPIVersionNegotiation())
 	options = append(defaultOptions, options...)
 	return client.NewClientWithOpts(options...)
 }

managedplugin/log_reader.go

@@ -38,7 +38,7 @@ func (r *LogReader) NextLine() ([]byte, error) {
 	if !isPrefix || err != nil {
 		return line, err
 	}
-	prefix := make([]byte, logReaderPrefixLen)
+	prefix := make([]byte, logReaderPrefixLen, logReaderPrefixLen+len(ellipsis))
 	for i := 0; isPrefix; i++ {
 		// this loop is entered if a log line is too long to fit into the buffer. We discard it by
 		// iterating until isPrefix becomes false. We only log the first few bytes of the line to help with