internal/ci: bump Go and goreleaser versions for the upcoming alpha

A Go bugfix release came out last week with fixes.
A new major version of goreleaser also came out, which primarily removes
field names and features which had been deprecated for months,
and which we had already been fixing up over time.

Signed-off-by: Daniel Martí <mvdan@mvdan.cc>
Change-Id: I583b74072589395fada8529358e44268628056da
Reviewed-on: https://review.gerrithub.io/c/cue-lang/cue/+/1197378
Reviewed-by: Roger Peppe <rogpeppe@gmail.com>
TryBot-Result: CUEcueckoo <cueckoo@cuelang.org>
Unity-Result: CUE porcuepine <cue.porcuepine@gmail.com>

.github/workflows/release.yml

@@ -57,7 +57,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           cache: false
-          go-version: 1.22.4
+          go-version: 1.22.5
       - name: Setup qemu
         uses: docker/setup-qemu-action@v3
       - name: Set up Docker Buildx
@@ -74,7 +74,7 @@ jobs:
         uses: goreleaser/goreleaser-action@v5
         with:
           install-only: true
-          version: v1.26.1
+          version: v2.0.1
       - name: Run GoReleaser with CUE
         run: cue cmd release
         working-directory: ./internal/ci/goreleaser

internal/ci/repo/repo.cue

@@ -37,9 +37,9 @@ latestStableGo: "1.22.x"
 // Use a specific latest version for release builds.
 // Note that we don't want ".x" for the sake of reproducibility,
 // so we instead pin a specific Go release.
-pinnedReleaseGo: "1.22.4"
+pinnedReleaseGo: "1.22.5"
 
-goreleaserVersion: "v1.26.1"
+goreleaserVersion: "v2.0.1"
 
 // zeroReleaseTagSuffix is the suffix used to identify all "zero" releases.
 // When we create a release branch for v0.$X.0, it's likely that commits on the