chore(deps): update go module directive to v1.26.6

[scality-renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
go (source)	golang	minor	1.25.6 → 1.26.6	1.27.0 (+1)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[ezekiel-alexrod]

On hold for now.

• Branch is stale (based on main from June 15): only detect-modules ran, no tests/lint. Needs a rebase and a full green CI first.
• GO_VERSION: 1.25 in pre-merge.yaml should be bumped along with this, otherwise CI relies on implicit GOTOOLCHAIN auto-download.
• raidmgmt is a library: bumping the go directive forces Go ≥ 1.26.4 on all consumers. We'll check they're ready before merging.

Will rebase and merge once the above is aligned.

[github-actions]

Dependency Bump Evaluation

Version change: Go 1.25.6 -> 1.26.6 (minor)
Semver bump type: minor

Changes:

• Go module directive bumped from 1.25.6 to 1.26.6
• Removed unused github.com/vektra/mockery/v3 dependency from go.mod and go.sum

Breaking changes: None affecting this codebase. Go 1.26 introduces stricter net/url.Parse validation, Green Tea GC as default, linker section reorganization, and deprecates some crypto APIs -- but this codebase uses none of these patterns (verified: no net/url imports, no url.Parse, no crypto/ecdsa or crypto/rsa, no GODEBUG settings, no reflect.Type or reflect.Value).

Security concerns: None. Go 1.26 enables post-quantum TLS key exchanges by default and includes various standard library hardening. No supply chain concerns -- this is a Go toolchain update from the official Go project.

Impact on codebase:

• mockery/v3 removal is safe -- no references found anywhere in the codebase (no imports, no go:generate directives)
• No code uses Go 1.26 breaking-change-affected APIs

Recommendation: REVIEW REQUIRED

Notes:

• CI is failing: The build-e2e job fails because .github/workflows/pre-merge.yaml hardcodes GO_VERSION: 1.25 with GOTOOLCHAIN=local. Go 1.25.13 refuses to build a module requiring Go 1.26.6. Fix: update GO_VERSION from 1.25 to 1.26 in .github/workflows/pre-merge.yaml (line 11).
• Once CI is green, this PR should be safe to merge.

-- Claude Code