Require Go 1.26.11: GO-2026-6859 blocks MegaLinter on every pull request #6043

🤖 Generated by the Agentic Engineer

Problem

The osv-scanner step in MegaLinter now reports GO-2026-6859 against the Go standard library for modules that declare go 1.26.10. The fix is in 1.26.11. osv-scanner is a blocking linter, and CI - Required Checks requires MegaLinter on pull requests, so every new or re-run pull request is blocked. The merge-group run has no lint job, so PRs already in the queue aren't affected.

Evidence

• On chore(deps): update devantler-tech/agent-plugins digest to 48d9db3 #6032 (an unrelated digest bump), MegaLinter failed only on osv-scanner, which listed stdlib 1.26.10 → fixed 1.26.11 for the root go.mod and two test modules (job 130295993320).
• The same advisory breaks the World at Ruin native builds on Go 1.27.3 (Build with Go 1.27.4: GO-2026-6859 fails every Nakama native build world-at-ruin#1681).

Acceptance criteria

• Every module directive pinned to go 1.26.10 requires go 1.26.11. Modules stay tidy, and the root module builds and vets.
• MegaLinter's osv-scanner passes on the pull request head.

Size

XS