build(deps): bump github.com/golangci/golangci-lint/v2 in /tools

Bumps [github.com/golangci/golangci-lint/v2](https://github.com/golangci/golangci-lint) from 2.9.0 to 2.11.4.
- [Release notes](https://github.com/golangci/golangci-lint/releases)
- [Changelog](https://github.com/golangci/golangci-lint/blob/main/CHANGELOG.md)
- [Commits](https://github.com/golangci/golangci-lint/compare/v2.9.0...v2.11.4)

---
updated-dependencies:
- dependency-name: github.com/golangci/golangci-lint/v2
  dependency-version: 2.11.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

tools/vendor/github.com/securego/gosec/v2/Makefile

@@ -16,7 +16,7 @@ GOBIN ?= $(GOPATH)/bin
 GOSEC ?= $(GOBIN)/gosec
 GO_MINOR_VERSION = $(shell $(GO) version | cut -c 14- | cut -d' ' -f1 | cut -d'.' -f2)
 GOVULN_MIN_VERSION = 17
-GO_VERSION = 1.25
+GO_VERSION = 1.26
 LDFLAGS = -ldflags "\
 	-X 'main.Version=$(shell git describe --tags --always)' \
 	-X 'main.GitTag=$(shell git describe --tags --abbrev=0)' \
@@ -48,7 +48,7 @@ golangci:
 
 sec:
 	@echo "SECURITY SCANNING"
-	./$(BIN) ./...
+	./$(BIN) -exclude-dir=testdata ./...
 
 govulncheck: install-govulncheck
 	@echo "CHECKING VULNERABILITIES"
@@ -57,7 +57,7 @@ govulncheck: install-govulncheck
 	fi
 
 test-coverage:
-	go test -race -v -count=1 -coverprofile=coverage.out ./...
+	go test -race -v -count=1 -coverpkg=./... -coverprofile=coverage.out ./...
 
 build:
 	go build $(LDFLAGS) -o $(BIN) ./cmd/gosec/
@@ -65,9 +65,15 @@ build:
 build-race:
 	go build -race $(LDFLAGS) -o $(BIN) ./cmd/gosec/
 
+build-debug:
+	go build -tags debug $(LDFLAGS) -o $(BIN)-debug ./cmd/gosec/
+
+build-debug-race:
+	go build -race -tags debug $(LDFLAGS) -o $(BIN)-debug ./cmd/gosec/
+
 clean:
 	rm -rf build vendor dist coverage.out
-	rm -f release image $(BIN)
+	rm -f release image $(BIN) $(BIN)-debug
 
 release:
 	@echo "Releasing the gosec binary..."