[Sync] Update project files from source repository (842c379)

[mrz1836]

What Changed

• MAGE_X_VERSION: v1.28.0 → v1.29.0 (.github/env/10-mage-x.env)

• MAGE_X_GORELEASER_VERSION: v2.18.2 → v2.18.3 (.github/env/10-mage-x.env)

• MAGE_X_GOVULNCHECK_VERSION: v1.8.0 → v1.9.0 (.github/env/10-mage-x.env)

• MAGE_X_OSV_SCANNER_VERSION: v2.6.0 → v2.7.0 (.github/env/10-mage-x.env)

• MAGE_X_STATICCHECK_VERSION: 2026.2.1 → 2026.2.2 (.github/env/10-mage-x.env)

• MAGE_X_BENCHSTAT_VERSION_LATEST: v0.0.0-20260929162123-406019bb8b68 → v0.0.0-20261009192801-be2c69fb417e (.github/env/10-mage-x.env)

• GOVULNCHECK_VERSION: v1.8.0 → v1.9.0 (.github/env/10-security.env)

• OSV_SCANNER_VERSION: v2.6.0 → v2.7.0 (.github/env/10-security.env)

• OSV_SCANNER_SHA256_LINUX_AMD64: ca69b3d3cd08f889a49dc0a383122f71cc528b83803671df5fd874d97485b108 → 160c6253e2922e9e0a6a9771c5c4c40a4b3c6090b34a3cdd5e80c96cc2e4218b (.github/env/10-security.env)

• OSV_SCANNER_SHA256_LINUX_ARM64: 2c71403eb443d05891c4f268c3ad771cf4f16e5443463fd7851ef8f454d3c7e4 → 4061ef4c021ed3c47f203b818f337e351336cc5cd67c0274fc36bd1dfc728dd7 (.github/env/10-security.env)

• actions/upload-artifact@v7.0.1 → v7.0.2 (.github/actions/upload-statistics/action.yml, .github/actions/upload-artifact-resilient/action.yml, .github/actions/warm-cache/action.yml, .github/workflows/scorecard.yml)

• github/codeql-action@v4.38.2 → v4.38.3 (.github/workflows/codeql-analysis.yml, .github/workflows/fortress-security-scans.yml, .github/workflows/scorecard.yml)

• Updated Go testing conventions to recommend t.Context() instead of context.Background() in tests, and b.Loop() instead of manual b.ResetTimer() followed by loop in benchmarks

• Replaced generic interface{} types with any in code examples across testing standards and Go essentials documentation

• Clarified that t.Setenv() and t.Chdir() restore process state automatically and cannot be used in parallel tests

Why It Was Necessary

• Synchronize GitHub Actions and security scanning tools to their latest stable versions for bug fixes and improvements
• Align mage-x tooling dependencies with upstream releases for consistency across development and CI environments
• Update OSV-Scanner SHA-256 digests to match the new release binaries and maintain supply chain integrity

Testing Performed

• Verified all version pins in .github/env/ configuration files match their corresponding upstream releases
• Confirmed GitHub Actions SHA pins resolve to the specified semantic versions (v7.0.2, v4.38.3)
• Validated OSV-Scanner SHA-256 digests against official release checksums from the v2.7.0 release
• Reviewed documentation changes for technical accuracy and consistency with Go 1.24.x testing patterns

Impact / Risk

• Low risk: Changes are primarily dependency updates to patch versions and documentation improvements
• No breaking changes: All updates maintain backward compatibility with existing workflows and tooling
• Security improvement: Updated vulnerability scanning tools (govulncheck, osv-scanner) provide enhanced detection capabilities
• Developer experience: Documentation updates align with modern Go idioms and reduce confusion around test helper usage

[Copilot]

🟢 Approval recommended

The version pins, action SHAs, checksums, and Go guidance are consistent and valid.

0 open findings

What changed in this PR

Synchronizes CI tooling, security scanners, and Go guidance with upstream releases.

Changes:

• Updates pinned GitHub Actions and tooling versions.
• Refreshes OSV-Scanner checksums.
• Modernizes Go testing and benchmark examples.

File	Description
.github/​workflows/​scorecard.yml	Updates artifact and CodeQL actions.
.github/​workflows/​fortress-security-scans.yml	Updates CodeQL SARIF upload.
.github/​workflows/​codeql-analysis.yml	Updates CodeQL actions.
.github/​tech-conventions/​testing-standards.md	Documents modern test helpers.
.github/​tech-conventions/​go-essentials.md	Modernizes Go examples.
.github/​env/​10-security.env	Updates scanners and checksums.
.github/​env/​10-mage-x.env	Updates mage-x tooling pins.
.github/​actions/​warm-cache/​action.yml	Updates artifact upload action.
.github/​actions/​upload-statistics/​action.yml	Updates artifact upload action.
.github/​actions/​upload-artifact-resilient/​action.yml	Updates resilient uploads.

🧠 Review effort: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.