deps: ci: bump actions/setup-go from 5 to 6

## Dependabot Update

Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.

Release notes

Sourced from actions/setup-go's releases.

v6.0.0

What's Changed

Breaking Changes

• Improve toolchain handling to ensure more reliable and consistent toolchain selection and management by @​matthewhughes934 in actions/setup-go#460


• Upgrade Nodejs runtime from node20 to node 24 by @​salmanmkc in actions/setup-go#624

Make sure your runner is on version v2.327.1 or later to ensure compatibility with this release. See Release Notes

Dependency Upgrades

• Upgrade @​types/jest from 29.5.12 to 29.5.14 by @​dependabot[bot] in actions/setup-go#589


• Upgrade @​actions/tool-cache from 2.0.1 to 2.0.2 by @​dependabot[bot] in actions/setup-go#591


• Upgrade @​typescript-eslint/parser from 8.31.1 to 8.35.1 by @​dependabot[bot] in actions/setup-go#590


• Upgrade undici from 5.28.5 to 5.29.0 by @​dependabot[bot] in actions/setup-go#594


• Upgrade typescript from 5.4.2 to 5.8.3 by @​dependabot[bot] in actions/setup-go#538


• Upgrade eslint-plugin-jest from 28.11.0 to 29.0.1 by @​dependabot[bot] in actions/setup-go#603


• Upgrade form-data to bring in fix for critical vulnerability by @​matthewhughes934 in actions/setup-go#618


• Upgrade actions/checkout from 4 to 5 by @​dependabot[bot] in actions/setup-go#631

New Contributors

• @​matthewhughes934 made their first contribution in actions/setup-go#618


• @​salmanmkc made their first contribution in actions/setup-go#624

Full Changelog: https://github.com/actions/setup-go/compare/v5...v6.0.0

v5.6.0

What's Changed

• Fall back to downloading from go.dev/dl instead of storage.googleapis.com/golang by @​aparnajyothi-y in actions/setup-go#689

Full Changelog: https://github.com/actions/setup-go/compare/v5...v5.6.0

v5.5.0

What's Changed

Bug fixes:

• Update self-hosted environment validation by @​priyagupta108 in actions/setup-go#556


• Add manifest validation and improve error handling by @​priyagupta108 in actions/setup-go#586


• Update template link by @​jsoref in actions/setup-go#527

Dependency updates:

• Upgrade @​action/cache from 4.0.2 to 4.0.3 by @​aparnajyothi-y in actions/setup-go#574


• Upgrade @​actions/glob from 0.4.0 to 0.5.0 by @​dependabot in actions/setup-go#573


• Upgrade ts-jest from 29.1.2 to 29.3.2 by @​dependabot in actions/setup-go#582


• Upgrade eslint-plugin-jest from 27.9.0 to 28.11.0 by @​dependabot in actions/setup-go#537

New Contributors

• @​jsoref made their first contribution in actions/setup-go#527

Full Changelog: https://github.com/actions/setup-go/compare/v5...v5.5.0

... (truncated)

Commits

• 4dc6199 Bump semver and @​types/semver (#652)


• f3787be Add comprehensive breaking changes documentation for v6 (#674)


• 3a0c2c8 Bump actions/publish-action from 0.3.0 to 0.4.0 (#641)


• faf5242 Add support for .tool-versions file in setup-go, update workflow (#673)


• 7bc60db Fall back to downloading from go.dev/dl instead of storage.googleapis.com/gol...


• c0137ca Bump eslint-config-prettier from 10.0.1 to 10.1.8 and document breaking chang...


• 4469467 Bump actions/checkout from 4 to 5 (#631)


• e093d1e Node 24 upgrade (#624)


• 1d76b95 Improve toolchain handling (#460)


• e75c3e8 Bump form-data to bring in fix for critical vulnerability (#618)


• Additional commits viewable in compare view

[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

## Pull Request

- PR: #47
- Author: @dependabot[bot]
- URL: https://github.com/aRustyDev/pcf-mcp/pull/47

---
This issue was automatically created to track the Dependabot update.