chore: update Go to 1.25.7 and pin workflow versions for Renovate

- Updated GO_VERSION to 1.25.7 across all GitHub Actions workflows to fix immediate build failures
- Added custom regex manager to `.github/renovate.json` to explicitly track `GO_VERSION` in YAML files
- Ensures Renovate detects and automerges Go updates for workflows alongside the main project

.github/workflows/benchmark.yml

@@ -20,7 +20,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: '1.25.6'
+  GO_VERSION: '1.25.7'
   GOTOOLCHAIN: auto
 
 # Minimal permissions at workflow level; write permissions granted at job level for push only

.github/workflows/codecov-upload.yml

@@ -19,7 +19,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: '1.25.6'
+  GO_VERSION: '1.25.7'
   NODE_VERSION: '24.12.0'
   GOTOOLCHAIN: auto
 

.github/workflows/codeql.yml

@@ -21,7 +21,7 @@ concurrency:
   cancel-in-progress: true
 
 env:
-  GO_VERSION: '1.25.6'
+  GO_VERSION: '1.25.7'
   GOTOOLCHAIN: auto
 
 permissions:

.github/workflows/e2e-tests-split.yml

@@ -53,7 +53,7 @@ on:
 
 env:
   NODE_VERSION: '20'
-  GO_VERSION: '1.25.6'
+  GO_VERSION: '1.25.7'
   GOTOOLCHAIN: auto
   REGISTRY: ghcr.io
   IMAGE_NAME: ${{ github.repository_owner }}/charon

.github/workflows/nightly-build.yml

@@ -15,7 +15,7 @@ on:
       default: "false"
 
 env:
-  GO_VERSION: '1.25.6'
+  GO_VERSION: '1.25.7'
   NODE_VERSION: '24.12.0'
   GOTOOLCHAIN: auto
   GHCR_REGISTRY: ghcr.io

.github/workflows/quality-checks.yml

@@ -23,7 +23,7 @@ permissions:
   checks: write
 
 env:
-  GO_VERSION: '1.25.6'
+  GO_VERSION: '1.25.7'
   NODE_VERSION: '24.12.0'
   GOTOOLCHAIN: auto
 

.github/workflows/release-goreleaser.yml

@@ -10,7 +10,7 @@ concurrency:
   cancel-in-progress: false
 
 env:
-  GO_VERSION: '1.25.6'
+  GO_VERSION: '1.25.7'
   NODE_VERSION: '24.12.0'
   GOTOOLCHAIN: auto