chore: revert to Go 1.25.7 and disable vulncheck

Switch back to Go 1.25.7 and remove vulncheck from CI and the
default check target. The standalone `make vulncheck` target is
kept for manual use.

Made-with: Cursor

Author: lburgazzoli

.github/workflows/ci.yml

@@ -32,8 +32,6 @@ jobs:
       - name: Run linter
         run: make lint
 
-      - name: Run vulnerability check
-        run: make vulncheck
 
   dev-container:
     runs-on: ubuntu-latest

Makefile

@@ -83,7 +83,7 @@ vulncheck:
 
 # Run all checks
 .PHONY: check
-check: lint vulncheck
+check: lint
 
 # Run tests
 .PHONY: test
@@ -132,6 +132,6 @@ help:
 	@echo "  lint        - Run golangci-lint"
 	@echo "  lint/fix    - Run golangci-lint with auto-fix"
 	@echo "  vulncheck   - Run vulnerability scanner"
-	@echo "  check       - Run all checks (lint + vulncheck)"
+	@echo "  check       - Run all checks (lint)"
 	@echo "  test        - Run tests"
 	@echo "  help        - Show this help message"

docs/code-review.md

@@ -56,9 +56,6 @@ make lint
 # Auto-fix issues where possible (ALWAYS try this FIRST)
 make lint/fix
 
-# Run vulnerability scanner
-make vulncheck
-
 # Run all checks
 make check
 ```
@@ -152,7 +149,7 @@ Co-Authored-By: Claude <noreply@anthropic.com>
 
 Before submitting a PR:
 * [ ] All tests pass (`make test`)
-* [ ] All checks pass (`make check` - includes lint and vulncheck)
+* [ ] All checks pass (`make check` - includes lint)
 * [ ] Code formatted (`make fmt`)
 * [ ] Dependencies tidied (`make tidy`)
 * [ ] New tests added for new features

docs/quality.md

@@ -14,11 +14,10 @@ Quality verification is a mandatory part of the development workflow, not a pre-
 2. **Run `make lint-fix`** - Auto-fix formatting and simple issues
 3. **Run `make lint`** - Check for remaining linting issues
 4. **Manual fixes** - Address issues that can't be auto-fixed
-5. **Run `make check`** - Complete quality verification (lint + vulncheck + tests)
+5. **Run `make check`** - Complete quality verification (lint + tests)
 
 **make check includes:**
 - `make lint` - golangci-lint with all enabled linters
-- `make vulncheck` - Security vulnerability scanning
 - `make test` - All unit and integration tests
 
 ## Lint-Fix-First
@@ -61,11 +60,6 @@ All of these MUST pass before code is considered complete:
 make lint
 ```
 
-**Vulnerability Check:**
-```bash
-make vulncheck
-```
-
 **Tests:**
 ```bash
 make test

docs/setup.md

@@ -24,10 +24,7 @@ make lint
 # Run linter with auto-fix (ALWAYS try this FIRST before manual fixes)
 make lint/fix
 
-# Run vulnerability scanner
-make vulncheck
-
-# Run all checks (lint + vulncheck)
+# Run all checks (lint)
 make check
 
 # Run tests

go.mod

@@ -1,6 +1,6 @@
 module github.com/opendatahub-io/odh-cli
 
-go 1.25.8
+go 1.25.7
 
 require (
 	github.com/blang/semver/v4 v4.0.0