fix: bumps go mod version to 1.25; ci takes latest patch (#4628)

---------
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

.github/actions/bootstrap/action.yaml

@@ -5,7 +5,7 @@ inputs:
   go-version:
     description: "Go version to install"
     required: true
-    default: ">= 1.24"
+    default: "1.25.x"
   go-dependencies:
     description: "Download go dependencies"
     required: true
@@ -33,6 +33,7 @@ runs:
       if: inputs.go-version != ''
       with:
         go-version: ${{ inputs.go-version }}
+        check-latest: true
 
     - name: Restore tool cache
       if: inputs.tools == 'true'

.github/workflows/codeql-analysis.yml

@@ -44,6 +44,7 @@ jobs:
       uses: actions/setup-go@7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5 #v6.2.0
       with:
         go-version-file: go.mod
+        check-latest: true
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

go.mod

@@ -1,6 +1,6 @@
 module github.com/anchore/syft
 
-go 1.24.6
+go 1.25
 
 require (
 	github.com/BurntSushi/toml v1.6.0