ci: ensure we always use the latest patch version of golang (#3349)

Signed-off-by: Jan Larwig <jan@larwig.com>

.github/workflows/ci.yml

@@ -20,11 +20,17 @@ jobs:
     - name: Check out code
       uses: actions/checkout@v6
 
+    - name: Get Go version
+      run: |
+        version=$(grep "^go " go.mod | cut -d' ' -f2)
+        echo "version=${version}" >> "$GITHUB_OUTPUT"
+      id: go-version
+
     - name: Set up Go
       uses: actions/setup-go@v6
       with:
-        go-version-file: go.mod
-      id: go
+        go-version: ${{ steps.go-version.outputs.version }}
+        check-latest: true
 
     - name: Install golangci-lint
       env:

.github/workflows/publish-release.yml

@@ -42,11 +42,18 @@ jobs:
         git tag -a "${version}" -m "Release ${version}"
         echo "version=${version}" >> $GITHUB_OUTPUT
       id: tag
-    
-    - name: Set up go
+
+    - name: Get Go version
+      run: |
+        version=$(grep "^go " go.mod | cut -d' ' -f2)
+        echo "version=${version}" >> "$GITHUB_OUTPUT"
+      id: go-version
+
+    - name: Set up Go
       uses: actions/setup-go@v6
       with:
-        go-version-file: go.mod
+        go-version: ${{ steps.go-version.outputs.version }}
+        check-latest: true
 
     - name: Get dependencies
       env:

go.mod

@@ -1,6 +1,6 @@
 module github.com/oauth2-proxy/oauth2-proxy/v7
 
-go 1.25.6
+go 1.25.0
 
 require (
 	cloud.google.com/go/compute/metadata v0.9.0