chore: update dependencies and documentation linting rules

Bumped Go version to 1.26 in Tekton CI tasks and updated codespell to
v2.4.2. Additionally, added a Vale rule to prevent session ID
exposure in URLs, adjusted bare-metal term mappings, and updated UBI
images in test data.

Signed-off-by: Chmouel Boudjnah <chmouel@redhat.com>

Author: chmouel

.pre-commit-config.yaml

@@ -15,7 +15,7 @@ repos:
       - id: detect-private-key
         exclude: ".*_test.go"
   - repo: https://github.com/codespell-project/codespell
-    rev: v2.4.1
+    rev: v2.4.2
     hooks:
       - id: codespell
         files: "^(docs/content|pkg|test)/.*"

.tekton/doc.yaml

@@ -63,7 +63,7 @@ spec:
                 - name: workingdir
                   value: $(workspaces.source.path)
             - name: hugo-build
-              image: docker.io/golang:1.25
+              image: docker.io/golang:1.26
               workingDir: $(workspaces.source.path)
               script: |
                 #!/usr/bin/env bash

.tekton/generate-coverage-release.yaml

@@ -57,7 +57,7 @@ spec:
                 - name: workingdir
                   value: $(workspaces.source.path)
             - name: unittest
-              image: docker.io/golang:1.25
+              image: docker.io/golang:1.26
               workingDir: $(workspaces.source.path)
               env:
                 - name: GOCACHE
@@ -94,7 +94,7 @@ spec:
                 exit "${test_status}"
             - name: codecov
               # Has everything we need in there and we already fetched it!
-              image: docker.io/golang:1.25
+              image: docker.io/golang:1.26
               workingDir: $(workspaces.source.path)
               env:
                 - name: CODECOV_TOKEN
@@ -112,7 +112,7 @@ spec:
                 chmod +x ./codecov
                 ./codecov -C {{revision}} -v
             - name: upload-release
-              image: docker.io/golang:1.25
+              image: docker.io/golang:1.26
               workingDir: $(workspaces.source.path)
               env:
                 - name: HUB_TOKEN

.tekton/go.yaml

@@ -56,7 +56,7 @@ spec:
             - name: unittest
               # we get bumped out when usingh the official image with docker.io
               # ratelimit so workaround this.
-              image: docker.io/golang:1.25
+              image: docker.io/golang:1.26
               env:
                 - name: GOCACHE
                   value: $(workspaces.source.path)/go-build-cache/cache
@@ -94,7 +94,7 @@ spec:
                 exit "${test_status}"
 
             - name: coverage
-              image: docker.io/golang:1.25
+              image: docker.io/golang:1.26
               env:
                 - name: CODECOV_TOKEN
                   valueFrom:

.tekton/linter.yaml

@@ -166,14 +166,14 @@ spec:
 
             - name: check-e2e-tests-naming
               displayName: "Check e2e tests naming convention"
-              image: docker.io/golang:1.25
+              image: docker.io/golang:1.26
               workingDir: $(workspaces.source.path)
               script: |
                 make lint-e2e-naming
 
             - name: check-generated-schemas
               displayName: "Check generated OpenAPI schemas"
-              image: docker.io/golang:1.25
+              image: docker.io/golang:1.26
               workingDir: $(workspaces.source.path)
               env:
                 - name: HUB_TOKEN

.vale/styles/RedHat/SessionId.yml

@@ -0,0 +1,10 @@
+---
+extends: existence
+level: error
+ignorecase: true
+scope: raw
+action:
+  name: remove
+message: "Do not publish URLs that contain session identifiers. Exposed session IDs enable session hijacking and unauthorized account access."
+tokens:
+  - '[&?](sessionId|seSessionId)=[0-9a-zA-Z-]{8,}'

.vale/styles/RedHat/TermsErrors.yml

@@ -20,8 +20,8 @@ swap:
   "(?<!Mozilla )Thunderbird": Mozilla Thunderbird
   "(?<!pseudo-)ops": operations
   "(?<!self-)hosted engine|hosted-engine": self-hosted engine
-  "bare metal( clusters?| compute| configuration| controls?| environments?| equipment| events?| hardware| hosts?| infrastructure| installations?| installers?| instances?| machines?| media| nodes?| provisioning| servers?| workers?| networks?)": bare-metal$1
-  "bare-metal(?! clusters?| compute| configuration| controls?| environments?| equipment| events?| hardware| hosts?| infrastructure| installations?| installers?| instances?| machines?| media| nodes?| provisioning| servers?| workers?)": bare metal
+  "bare metal( clusters?| compute| configuration| controls?| environments?| equipment| events?| hardware| hosts?| infrastructure| installations?| installers?| instances?| machines?| media| nodes?| provisioning| servers?| systems?| workers?| networks?)": bare-metal$1
+  "bare-metal(?! clusters?| compute| configuration| controls?| environments?| equipment| events?| hardware| hosts?| infrastructure| installations?| installers?| instances?| machines?| media| nodes?| provisioning| servers?| systems?| workers?)": bare metal
   "[bB]asic [aA]uth": Basic HTTP authentication|Basic authentication
   "a lot(?: of)?": many|much
   "best of breed|best-of-breed": best in class
@@ -436,7 +436,7 @@ swap:
   virtual diskette drive: virtual floppy drive
   virtual diskette(?! drive): virtual floppy disk
   virtual DOS machine: DOS session
-  versus: compared to
+  vs: versus|compared to
   virtual hard disk: virtual hard drive
   virtual-equals-real: nonpageable
   virtual-equals-virtual: pageable

.vale/styles/RedHat/TermsWarnings.yml

@@ -16,7 +16,6 @@ swap:
   '(?<!\/)etc(?!\/)': and so on
   '\b(?:eg)': for example
   '\b(?:ie)': that is
-  'I(?!/O)': you
   'is updatable|are updatable': can be updated|can be changed
   "(?<!the |the Red Hat )Hybrid Cloud Console|(?<!the )Red Hat Hybrid Cloud Console|(?<!the |Red Hat |Hybrid )Cloud Console|the Cloud Console": the Red Hat Hybrid Cloud Console|the Hybrid Cloud Console
   all caps: uppercase

test/testdata/pipelinerun-tekton-validation.yaml

@@ -14,7 +14,7 @@ spec:
         taskSpec:
           stepsos:
             - name: step
-              image: registry.access.redhat.com/ubi9/ubi-micro
+              image: registry.access.redhat.com/ubi10/ubi-micro
               script: |
                 echo "HELLOMOTO"
                 exit 0