sec: bump to go1.26 and grpc - CVE-2026-33186 (#1613)

(cherry picked from commit 0e4aa05)
Signed-off-by: dapr-bot <dapr-bot@users.noreply.github.com>

Author: mikeee

.github/workflows/dapr_cli.yaml

@@ -29,7 +29,7 @@ jobs:
     name: Build ${{ matrix.target_os }}_${{ matrix.target_arch }} binaries
     runs-on: ${{ matrix.os }}
     env:
-      GOLANG_CI_LINT_VER: v1.64.2
+      GOLANG_CI_LINT_VER: v2.10.1
       GOOS: ${{ matrix.target_os }}
       GOARCH: ${{ matrix.target_arch }}
       GOPROXY: https://proxy.golang.org
@@ -81,7 +81,7 @@ jobs:
           go-version-file: 'go.mod'
       - name: Run golangci-lint
         if: matrix.target_arch == 'amd64' && matrix.target_os == 'linux'
-        uses: golangci/golangci-lint-action@v3.2.0
+        uses: golangci/golangci-lint-action@v9
         with:
           version: ${{ env.GOLANG_CI_LINT_VER }}
           skip-cache: true