From f70631a7193f597c64820ba838c5566831241959 Mon Sep 17 00:00:00 2001
From: "anchore-actions-token-generator[bot]"
 <102182147+anchore-actions-token-generator[bot]@users.noreply.github.com>
Date: Tue, 17 Feb 2026 11:19:37 -0500
Subject: [PATCH] chore(deps): update tools to latest versions (#4614)

* chore(deps): update tools to latest versions

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

* chore: ci rules revive

Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>

---------

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Christopher Phillips <32073428+spiffcs@users.noreply.github.com>
Co-authored-by: spiffcs <32073428+spiffcs@users.noreply.github.com>
---
 .binny.yaml    | 6 +++---
 .golangci.yaml | 3 +--
 2 files changed, 4 insertions(+), 5 deletions(-)

diff --git a/.binny.yaml b/.binny.yaml
index 986d4c0f6..23d77143a 100644
--- a/.binny.yaml
+++ b/.binny.yaml
@@ -2,7 +2,7 @@ tools:
   # we want to use a pinned version of binny to manage the toolchain (so binny manages itself!)
   - name: binny
     version:
-      want: v0.11.2
+      want: v0.11.3
     method: github-release
     with:
       repo: anchore/binny
@@ -26,7 +26,7 @@ tools:
   # used for linting
   - name: golangci-lint
     version:
-      want: v2.8.0
+      want: v2.9.0
     method: github-release
     with:
       repo: golangci/golangci-lint
@@ -114,7 +114,7 @@ tools:
   # used to upload test fixture cache
   - name: yq
     version:
-      want: v4.52.2
+      want: v4.52.4
     method: github-release
     with:
       repo: mikefarah/yq
diff --git a/.golangci.yaml b/.golangci.yaml
index eacba69a6..9093acb66 100644
--- a/.golangci.yaml
+++ b/.golangci.yaml
@@ -50,10 +50,9 @@ linters:
       - legacy
       - std-error-handling
     rules:
-      # internal/os contains OS feature detection logic; the name reflects its purpose
+      # we have multiple packages in syft that might overlap with the stblib; their names reflect their purpose
       - linters:
           - revive
-        path: internal/os/
         text: "var-naming: avoid package names that conflict"
     paths:
       - third_party$