all: require govulncheck at v1.1.5-0.20260127235021-3276fb946d41

BuildGovulncheck builds the version of govulncheck specified in
the go.mod file of this module. Pull in the fix needed at gotip
that was recently applied in CL 739740.

For golang/go#77335.

Change-Id: I8bbe6047c3b83a23aa7ca5e6e0418368f02aac56
Cq-Include-Trybots: luci.golang.try:x_pkgsite-metrics-gotip-linux-amd64-longtest
Reviewed-on: https://go-review.googlesource.com/c/pkgsite-metrics/+/739960
Reviewed-by: Nicholas Husin <husin@google.com>
LUCI-TryBot-Result: Go LUCI <golang-scoped@luci-project-accounts.iam.gserviceaccount.com>
Reviewed-by: Nicholas Husin <nsh@golang.org>
Auto-Submit: Dmitri Shuralyov <dmitshur@golang.org>
Reviewed-by: Dmitri Shuralyov <dmitshur@google.com>
diff --git a/go.mod b/go.mod
index 95913f4..bef94ed 100644
--- a/go.mod
+++ b/go.mod
@@ -28,7 +28,7 @@
 	golang.org/x/oauth2 v0.34.0
 	golang.org/x/sync v0.19.0
 	golang.org/x/tools v0.41.0
-	golang.org/x/vuln v1.1.4
+	golang.org/x/vuln v1.1.5-0.20260127235021-3276fb946d41
 	google.golang.org/api v0.132.0
 	google.golang.org/genproto/googleapis/api v0.0.0-20230706204954-ccb25ca9f130
 	google.golang.org/grpc v1.56.2
@@ -77,8 +77,6 @@
 	golang.org/x/telemetry v0.0.0-20260109210033-bd525da824e2 // indirect
 	golang.org/x/text v0.33.0 // indirect
 	golang.org/x/time v0.14.0 // indirect
-	golang.org/x/tools/go/expect v0.1.1-deprecated // indirect
-	golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated // indirect
 	golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect
 	google.golang.org/appengine v1.6.7 // indirect
 	google.golang.org/genproto v0.0.0-20230706204954-ccb25ca9f130 // indirect
diff --git a/go.sum b/go.sum
index 143621f..e94417d 100644
--- a/go.sum
+++ b/go.sum
@@ -607,8 +607,8 @@
 golang.org/x/tools/go/expect v0.1.1-deprecated/go.mod h1:eihoPOH+FgIqa3FpoTwguz/bVUSGBlGQU67vpBeOrBY=
 golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated h1:1h2MnaIAIXISqTFKdENegdpAgUXz6NrPEsbIeWaBRvM=
 golang.org/x/tools/go/packages/packagestest v0.1.1-deprecated/go.mod h1:RVAQXBGNv1ib0J382/DPCRS/BPnsGebyM1Gj5VSDpG8=
-golang.org/x/vuln v1.1.4 h1:Ju8QsuyhX3Hk8ma3CesTbO8vfJD9EvUBgHvkxHBzj0I=
-golang.org/x/vuln v1.1.4/go.mod h1:F+45wmU18ym/ca5PLTPLsSzr2KppzswxPP603ldA67s=
+golang.org/x/vuln v1.1.5-0.20260127235021-3276fb946d41 h1:HzQR36A/pwYxbWw7o2nNaZl0VUi8+AEmDpzvu1FE+gw=
+golang.org/x/vuln v1.1.5-0.20260127235021-3276fb946d41/go.mod h1:93x2ugyfohm9XLBBOurRmRF58yPrLrV2FxEyFS6MZdo=
 golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=