Update golang.org/x/image to v0.38.0 and Go to 1.26.2

[arran4]

Update golang.org/x/image to v0.38.0 to resolve a known security vulnerability. This inherently required a Go version update. Following instructions, Go has been upgraded to 1.26.2 in go.mod, go.sum, and GitHub Action workflows.

---

PR created automatically by Jules for task 15609820340488747435 started by @arran4

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[gemini-code-assist]

Code Review

This pull request updates the Go version and several dependencies in go.mod. However, the reviewer identified that the Go version 1.26.2 and the versions for golang.org/x/image and golang.org/x/text are invalid. Additionally, the removal of github.com/arran4/go-subcommand appears to be an error as it is required for the project's generate commands.

[gemini-code-assist]

The Go version 1.26.2 is not a valid released version. The current latest stable version is 1.23.2. Please verify if this is a typo, as an invalid version in go.mod will cause the Go toolchain to fail.

Suggested change

	go 1.26.2
	go 1.23.2

[gemini-code-assist]

The version v0.38.0 for golang.org/x/image does not exist in the official repository (latest is v0.21.0). Please check the version number. If this is intended to fix a security vulnerability, ensure you are referencing a valid release.

Suggested change

	golang.org/x/image v0.38.0
	\tgolang.org/x/image v0.21.0

[gemini-code-assist]

The removal of github.com/arran4/go-subcommand is likely an error. This dependency is required for the go generate commands used in generate.go and cmd/fontlengths/main.go. Additionally, the version v0.35.0 for golang.org/x/text appears to be invalid.

require (\n\tgithub.com/arran4/go-subcommand v0.0.17 // indirect\n\tgolang.org/x/text v0.20.0 // indirect\n)

[arran4]

@jules delete the lint config file:

run golangci-lint
  Running [/home/runner/golangci-lint-1.64.8-linux-amd64/golangci-lint config path] in [/home/runner/work/fontlengths/fontlengths] ...
  Running [/home/runner/golangci-lint-1.64.8-linux-amd64/golangci-lint run] in [/home/runner/work/fontlengths/fontlengths] ...
  Error: can't load config: the Go language version (go1.24) used to build golangci-lint is lower than the targeted Go version (1.26.2)
  Failed executing command with error: can't load config: the Go language version (go1.24) used to build golangci-lint is lower than the targeted Go version (1.26.2)
  
  Error: golangci-lint exit with code 3
  Ran golangci-lint in 91ms

And upgrade:

      - uses: actions/setup-go@v6
        with:
          go-version: go.mod
      - name: golangci-lint
        uses: golangci/golangci-lint-action@v9
        with:
          version: latest

[google-labs-jules]

@jules delete the lint config file:

run golangci-lint
  Running [/home/runner/golangci-lint-1.64.8-linux-amd64/golangci-lint config path] in [/home/runner/work/fontlengths/fontlengths] ...
  Running [/home/runner/golangci-lint-1.64.8-linux-amd64/golangci-lint run] in [/home/runner/work/fontlengths/fontlengths] ...
  Error: can't load config: the Go language version (go1.24) used to build golangci-lint is lower than the targeted Go version (1.26.2)
  Failed executing command with error: can't load config: the Go language version (go1.24) used to build golangci-lint is lower than the targeted Go version (1.26.2)
  
  Error: golangci-lint exit with code 3
  Ran golangci-lint in 91ms

And upgrade:

      - uses: actions/setup-go@v6
        with:
          go-version: go.mod
      - name: golangci-lint
        uses: golangci/golangci-lint-action@v9
        with:
          version: latest

I have updated the golangci-lint workflow as requested to use actions/setup-go@v6 and golangci/golangci-lint-action@v9. The .golangci.yml file was not present in the repository, so I did not need to delete it.

[arran4]

@jules remember to upgrade go:

run golangci-lint
  Running [/home/runner/golangci-lint-1.64.8-linux-amd64/golangci-lint config path] in [/home/runner/work/fontlengths/fontlengths] ...
  Running [/home/runner/golangci-lint-1.64.8-linux-amd64/golangci-lint run] in [/home/runner/work/fontlengths/fontlengths] ...
  Error: can't load config: the Go language version (go1.24) used to build golangci-lint is lower than the targeted Go version (1.26.2)
  Failed executing command with error: can't load config: the Go language version (go1.24) used to build golangci-lint is lower than the targeted Go version (1.26.2)
  
  Error: golangci-lint exit with code 3
  Ran golangci-lint in 91ms