chore(deps): bump github.com/securego/gosec/v2 from 2.27.1 to 2.28.0 in /internal/golang/go-pin

[dependabot]

Bumps github.com/securego/gosec/v2 from 2.27.1 to 2.28.0.

Release notes

Sourced from github.com/securego/gosec/v2's releases.

v2.28.0

Changelog

• 9e75c0576c9878035d4221392108d458abe10fc3 feat(G101): detect AWS temporary access keys (#1702)
• 14f493ab92f212e1f3d69aeaa561989e5baf9d6f Update to go version 1.26.5 and 1.25.12 (#1704)
• ffd5ba1d3354928fae89ac31912bd1d730798799 Update all dependencies (#1703)
• 849570622f56a251c015c0e2417aebafc0216e17 Update all dependencies (#1699)
• 11023e51e1f46c4ea63315bdb7670f073442168f Update all dependencies (#1698)
• f88a0781159d73052ba792962e624749904783d6 fix: min+max G115 false positives (#1697)
• 6a008f60b8f7f3d7fae8f126984a9df5d4b7e0cf Update all dependencies (#1696)
• caf8857bbd3276599d0176b0528e9712bb0b5bec fix(G404): flag missing math/rand weak-random functions (#1694)
• cbef395cb1e2e3a35f6223f5b97f1657f7144797 Update all dependencies (#1695)
• f1c81de5fcdf7b466b229fb24ca02d1a8406dd09 Update all dependencies (#1693)
• 9addc97cefc9460a114e3c36f536b935da3b98c9 Update to go version 1.26.4 and 1.25.11 (#1690)
• 92ed8df32846e85d4e81b0b62012567afddfdc95 Update the gosec in the Github action to v2.27.1 (#1688)

Commits

• 9e75c05 feat(G101): detect AWS temporary access keys (#1702)
• 14f493a Update to go version 1.26.5 and 1.25.12 (#1704)
• ffd5ba1 Update all dependencies (#1703)
• 8495706 Update all dependencies (#1699)
• 11023e5 Update all dependencies (#1698)
• f88a078 fix: min+max G115 false positives (#1697)
• 6a008f6 Update all dependencies (#1696)
• caf8857 fix(G404): flag missing math/rand weak-random functions (#1694)
• cbef395 Update all dependencies (#1695)
• f1c81de Update all dependencies (#1693)
• Additional commits viewable in compare view

[pedromvgomes]

@dependabot rebase

[pedromvgomes]

Superseded — this bump is incorporated into feature/cinder-juniper (the v2.0.0 branch), together with the internal/golang/golang.go constant mirror that TestPinnedVersionsMatchGoPinModule requires. That mirror is why CI was failing here: Dependabot updates go-pin/go.mod but cannot update the Go constants, exactly as .github/dependabot.yml and AGENTS.md describe.

Closing in favour of that branch.

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.