ci: Fix yq installation failure by pinning version and disabling sumdb check (#2962)

* ci: Pin yq to v4.44.1 and disable checksum check

The installation of `yq` via `go install ...@latest` is failing in CI
due to a malformed file path in the `v4.52.1` release, which causes
`go install` to crash when verifying the module.

This change pins `yq` to `v4.44.1`, which is a known working version.
It also sets `GONOSUMDB=github.com/mikefarah/yq/v4` to bypass the
deprecation/checksum check that `go install` performs against the
`latest` version, which was causing failures even when a specific
version was requested.

Co-authored-by: joshlf <1046063+joshlf@users.noreply.github.com>

* ci: Pin yq to v4.44.1 and disable checksum check

The installation of `yq` via `go install ...@latest` is failing in CI
due to a malformed file path in the `v4.52.1` release, which causes
`go install` to crash when verifying the module.

This change pins `yq` to `v4.44.1`, which is a known working version.
It also sets `GONOSUMDB=github.com/mikefarah/yq/v4` to bypass the
deprecation/checksum check that `go install` performs against the
`latest` version, which was causing failures even when a specific
version was requested.

Co-authored-by: joshlf <1046063+joshlf@users.noreply.github.com>

* [ci] Pin yq to v4.44.1 and disable checksum check

The installation of `yq` via `go install ...@latest` is failing in CI
due to a malformed file path in the `v4.52.1` release, which causes
`go install` to crash when verifying the module.

This change pins `yq` to `v4.44.1`, which is a known working version.
It also sets `GONOSUMDB=github.com/mikefarah/yq/v4` to bypass the
deprecation/checksum check that `go install` performs against the
`latest` version, which was causing failures even when a specific
version was requested.

Co-authored-by: joshlf <1046063+joshlf@users.noreply.github.com>

---------

Co-authored-by: google-labs-jules[bot] <161369871+google-labs-jules[bot]@users.noreply.github.com>
Co-authored-by: joshlf <1046063+joshlf@users.noreply.github.com>

Author: joshlf

.github/workflows/ci.yml

@@ -893,7 +893,9 @@ jobs:
     name: Check that all toolchains listed in Cargo.toml are tested in CI
     steps:
       - name: Install yq (for YAML parsing)
-        run: go install github.com/mikefarah/yq/v4@latest
+        # FIXME(https://github.com/mikefarah/yq/issues/2587): Remove
+        # `GONOSUMDB` once this bug is fixed.
+        run: GONOSUMDB=github.com/mikefarah/yq/v4 go install github.com/mikefarah/yq/v4@v4.44.1
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
@@ -905,7 +907,9 @@ jobs:
     name: Check all-jobs-succeeded depends on all jobs
     steps:
       - name: Install yq (for YAML parsing)
-        run: go install github.com/mikefarah/yq/v4@latest
+        # FIXME(https://github.com/mikefarah/yq/issues/2587): Remove
+        # `GONOSUMDB` once this bug is fixed.
+        run: GONOSUMDB=github.com/mikefarah/yq/v4 go install github.com/mikefarah/yq/v4@v4.44.1
       - uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
         with:
           persist-credentials: false
@@ -931,7 +935,9 @@ jobs:
     name: Run Git hooks
     steps:
       - name: Install yq (for YAML parsing)
-        run: go install github.com/mikefarah/yq/v4@latest
+        # FIXME(https://github.com/mikefarah/yq/issues/2587): Remove
+        # `GONOSUMDB` once this bug is fixed.
+        run: GONOSUMDB=github.com/mikefarah/yq/v4 go install github.com/mikefarah/yq/v4@v4.44.1
       - name: Install ripgrep
         run: |
          sudo apt-get update