Updates for golangci-lint v1.61.0 (some gosec improvements) (#239)

* Updates for golangci-lint v1.61.0 (some gosec improvements)

* forgot this didn't use the shared workflow setup

.github/workflows/gochecks.yml

@@ -34,7 +34,7 @@ jobs:
         if: matrix.os == 'ubuntu-latest'
         uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 # pin@v6
         with:
-          version: v1.60.3
+          version: v1.61.0
       - name: Install Git Bash
         run: |
           choco install git

extensions/images.go

@@ -107,7 +107,7 @@ func elem2ColorComponent(o object.Object) (uint8, *object.Error) {
 	if i < 0 || i > 255 {
 		return 0, object.Errorfp("color component out of range (should be 0-255): %s", o.Inspect())
 	}
-	return uint8(i), nil //nolint:gosec // gosec not smart enough to see the range check just above this.
+	return uint8(i), nil
 }
 
 func rgbArrayToRBGAColor(arr []object.Object) (color.NRGBA, *object.Error) {
@@ -425,7 +425,7 @@ func createVectorImageFunctions(cdata ImageMap) { //nolint:funlen // this is a g
 }
 
 func mergeAdd(img1, img2 *image.NRGBA) {
-	//nolint:gosec // gosec not smart enough to see the range checks.
+	//nolint:gosec // gosec not smart enough to see the range checks with min - https://github.com/securego/gosec/issues/1212
 	for y := range img1.Bounds().Dy() {
 		for x := range img1.Bounds().Dx() {
 			p1 := img1.NRGBAAt(x, y)

extensions/shell.go

@@ -68,6 +68,7 @@ func createShellFunctions() {
 		if s.Term != nil {
 			s.Term.Suspend()
 		}
+		//nolint:fatcontext // we do need to update/reset the context and its cancel function.
 		s.Context, s.Cancel = context.WithCancel(context.Background()) // no timeout.
 		cmd, oerr := createCmd(*s, args)
 		if oerr != nil {