chore(ci): added govulncheck, bump transitive deps

[petruki]

This pull request introduces automated Go vulnerability checks to the CI/CD workflow and updates some indirect dependencies. The main goal is to improve security by integrating govulncheck into build, release, and code quality pipelines, and to provide Makefile targets for running vulnerability checks locally.

Security and CI/CD improvements:

• Added a "Vulnerability Check" step using golang/govulncheck-action@v1 to the master.yml, release.yml, and sonar.yml GitHub Actions workflows to automatically scan for known Go vulnerabilities during CI/CD runs. [1] [2] [3]
• Updated the Makefile to add vulncheck-install and vulncheck targets, allowing developers to install and run govulncheck locally. [1] [2]

Dependency updates:

• Bumped indirect dependencies: github.com/klauspost/compress to v1.19.0 and github.com/klauspost/cpuid/v2 to v2.4.0 in go.mod.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud