update dependencies #1964

	name: lint, test and build image
	on: [pull_request, push]

	jobs:
	lint-test:
	runs-on: ubuntu-latest
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version-file: go.mod

	- name: golangci-lint
	uses: golangci/golangci-lint-action@v6
	with:
	args: --config .golangci.yml --timeout 2m
	version: v1.61.0

	- name: Test
	run: go test ./...
	build:
	runs-on: ubuntu-latest
	needs: [lint-test]
	steps:
	- name: Checkout code
	uses: actions/checkout@v4

	- name: Setup Go
	uses: actions/setup-go@v5
	with:
	go-version-file: go.mod

	- name: build binary
	run: make build-linux

	- name: Set up Docker Buildx
	uses: docker/setup-buildx-action@v3

	- name: Build Alloy Docker image - no push
	id: dockerbuild-alloy
	uses: docker/build-push-action@v6
	with:
	context: .
	push: false
	tags: ghcr.io/metal-toolbox/alloy:latest
	file: Dockerfile

	- name: Scan image - Alloy
	id: scan-Alloy-image
	uses: anchore/scan-action@v5
	with:
	image: ghcr.io/metal-toolbox/alloy:latest
	acs-report-enable: true
	# TODO(joel): Fail build once we migrate off CentOS.
	fail-build: false

	- name: Inspect action SARIF report
	run: cat ${{ steps.scan.outputs.sarif }}
	# This should run even if we fail the container scan
	if: always()

Provide feedback