govulncheck-action: using old action/setup-go results in no caching

[kolyshkin]

I tried using govulncheck-action and found out it warns about inability to create/use go cache in Post-Run action:

Failed to save: Unable to reserve cache with key setup-go-Linux-ubuntu24-go-1.23.0-57e5a0cc3f57cde7b8a8680dd8add3a3ecb87e2a81b18cf65ac8d2064e969869, another job may be creating this cache. More details: This legacy service is shutting down, effective April 15, 2025. Migrate to the new service ASAP. For more information: https://gh.io/gha-cache-sunset

This was fixed by a recent update of actions/setup-go: https://github.com/actions/setup-go/releases/tag/v5.3.0

This should be fixed by
https://go-review.googlesource.com/c/govulncheck-action/+/670318

[gopherbot]

Change https://go.dev/cl/670318 mentions this issue: action.yml: update actions to fix caching issue

[gabyhelp]

Related Issues

• govulncheck-action: suggestion allow specifying cache-dependency-path #70027
• govulncheck-action: Add support for check-latest when using setup-go #60704 (closed)

_{(Emoji vote if this was helpful or unhelpful; more detailed feedback welcome in this discussion.)}

[cherrymui]

cc @golang/vulndb

[kolyshkin]

@golang/vulndb can you please make a tagged release of this action? Most people rely on a tagged version.