internal/ci: bump Go and goreleaser for v0.15.4

Signed-off-by: Daniel Martí <mvdan@mvdan.cc>
Change-Id: I0eb2892dd108fdffe6e2d339467ef458c546d7a5
Reviewed-on: https://cue.gerrithub.io/c/cue-lang/cue/+/1229644
TryBot-Result: CUEcueckoo <cueckoo@cuelang.org>
Unity-Result: CUE porcuepine <cue.porcuepine@gmail.com>
Reviewed-by: Matthew Sackman <matthew@cue.works>
Reviewed-on: https://cue.gerrithub.io/c/cue-lang/cue/+/1229654
Reviewed-by: Paul Jolly <paul@myitcv.io>

Author: mvdan

.github/workflows/release.yaml

@@ -57,7 +57,7 @@ jobs:
         uses: actions/setup-go@v6
         with:
           cache: false
-          go-version: 1.25.5
+          go-version: 1.25.6
       - name: Set common go env vars
         run: |-
           case $(go env GOARCH) in
@@ -80,7 +80,7 @@ jobs:
         uses: goreleaser/goreleaser-action@v6
         with:
           install-only: true
-          version: v2.13.2
+          version: v2.13.3
       - name: Run GoReleaser with CUE
         env:
           GITHUB_TOKEN: ${{ secrets.CUECKOO_GITHUB_PAT }}

internal/ci/repo/repo.cue

@@ -32,9 +32,9 @@ linuxMachine: base.linuxLargeMachine
 // Use a specific latest version for release builds.
 // Note that we don't want ".x" for the sake of reproducibility,
 // so we instead pin a specific Go release.
-pinnedReleaseGo: "1.25.5"
+pinnedReleaseGo: "1.25.6"
 
-goreleaserVersion: "v2.13.2"
+goreleaserVersion: "v2.13.3"
 
 // zeroReleaseTagSuffix is the suffix used to identify all "zero" releases.
 // When we create a release branch for v0.$X.0, it's likely that commits on the