Fix workflow failures: Go version mismatch and deprecated actions

[Copilot]

The CI/CD workflow was failing due to an invalid Go version in go.mod (1.25.3, which doesn't exist) causing golangci-lint compatibility errors, deprecated CodeQL Action v2, and missing SARIF upload permissions.

Changes

• go.mod: Set Go version to 1.21 (aligns with workflow)
• ci-cd.yml:
  • Updated github/codeql-action/upload-sarif from v2 to v3
  • Added security-events: write and contents: read permissions to security-scan job
• .gitignore: Added bin/ directory

Result

Security scan now passes. Lint and test jobs run correctly but surface pre-existing code quality issues (unchecked error returns, test auth failures) that are unrelated to workflow configuration.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• api.groq.com
  • Triggering command: /tmp/go-build2129946370/b001/standup-bot.test -test.testlogfile=/tmp/go-build2129946370/b001/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

my workflow is not working, why?

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[Copilot]

Pull Request Overview

This PR fixes several GitHub Actions workflow failures caused by configuration mismatches and deprecated dependencies. The key issue was the use of a nonexistent Go version (1.25.3) in go.mod that conflicted with the workflow's Go 1.21 setup.

• Updated Go version in go.mod from nonexistent 1.25.3 to 1.21 (matching workflow)
• Upgraded deprecated CodeQL Action from v2 to v3 and added required security permissions
• Added bin/ directory to .gitignore to prevent build artifacts from being tracked

Reviewed Changes

Copilot reviewed 2 out of 3 changed files in this pull request and generated no comments.

File	Description
go.mod	Corrected Go version from nonexistent 1.25.3 to 1.21 to match CI/CD workflow configuration
.github/workflows/ci-cd.yml	Updated CodeQL Action to v3 and added security-events/contents permissions for SARIF upload
.gitignore	Added bin/ directory to ignore build artifacts generated during workflow execution

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.