Bump Go to 1.26.5

[jr-lillard]

Summary

• Bump Go from 1.26.1 to 1.26.5 in .mise.toml, the main module, and the smoke-test module.
• Clear the standard-library vulnerability reported by govulncheck as GO-2026-5856.

Test plan

• make check
• make build
• make race-test
• make check-surface
• make vuln — no vulnerabilities found
• Smoke-test package compilation

---

Summary by cubic

Bumped Go from 1.26.1 to 1.26.5 in .mise.toml, root go.mod, and smoke-test go.mod to pull in stdlib security fixes and clear govulncheck alert GO-2026-5856.

• Migration
  • Upgrade your local toolchain to Go 1.26.5 (e.g., run mise install) before building and testing.

^{Written for commit 5e29db4. Summary will update on new commits.}

[Copilot]

Pull request overview

Upgrades the repository’s Go toolchain from 1.26.1 to 1.26.5 across local tooling and both Go modules, aligning builds/tests with the patched standard library version to clear govulncheck finding GO-2026-5856.

Tip

If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.

Changes:

• Bump root module go.mod to go 1.26.5.
• Bump smoke-test module tests/smoke/go.mod to go 1.26.5.
• Update .mise.toml to install/use Go 1.26.5.

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
.mise.toml	Updates the pinned Go tool version used by mise to 1.26.5.
go.mod	Raises the main module’s Go version directive to 1.26.5.
tests/smoke/go.mod	Raises the smoke-test module’s Go version directive to 1.26.5.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[cubic-dev-ai]

No issues found across 3 files

_{Re-trigger cubic}