chore(devenv): provide go 1.27.0 and golangci-lint 2.13.0 in dev shell

nixos-unstable still ships go 1.27rc3 and golangci-lint 2.12.2, so:
- switch nixpkgs-unstable input to nixos-unstable-small (has go 1.27.0)
- pin languages.go to go_1_27
- build golangci-lint 2.13.0 from source with buildGo127Module
- skip go-tools (staticcheck) tests, which panic when rebuilt with go 1.27

All three workarounds are commented for later removal.

Author: kolaente

.devcontainer/devcontainer.json

@@ -13,6 +13,9 @@
         "vitest.explorer",
         "vue.volar"
       ]
+    },
+    "zed": {
+      "extensions": []
     }
   },
   "forwardPorts": [

devenv.lock

@@ -3,11 +3,11 @@
     "devenv": {
       "locked": {
         "dir": "src/modules",
-        "lastModified": 1783049965,
-        "narHash": "sha256-z2QvrvE+gzLnpqfLpQA4aq2gAB4xn6C5q2o1l7GBMXU=",
+        "lastModified": 1787159631,
+        "narHash": "sha256-pK/PYbBHT9bt7zvQ2kB83pkMibZfQadlZha7U25qtRs=",
         "owner": "cachix",
         "repo": "devenv",
-        "rev": "afed7bf3240c70d2827569568d2c46c25a64db51",
+        "rev": "267cf2eb26840c5ec73bce0a82046ec8907ece11",
         "type": "github"
       },
       "original": {
@@ -22,11 +22,11 @@
         "nixpkgs-src": "nixpkgs-src"
       },
       "locked": {
-        "lastModified": 1782924808,
-        "narHash": "sha256-tn2ahNv3ZNXyVHdPx/uw+N0xa7YSMtXUr6OEvu+s8ng=",
+        "lastModified": 1787002832,
+        "narHash": "sha256-DGkHh88/7YLVGZ7HzSVN4YmUmR+wGKudIp6H9UsUNT0=",
         "owner": "cachix",
         "repo": "devenv-nixpkgs",
-        "rev": "e2c881cb8d5f1cac6cef9d71f0d450a55691b999",
+        "rev": "ee3d58d53cfcddfc0ae6fc7f04f4fe2a0c7cf0ed",
         "type": "github"
       },
       "original": {
@@ -39,11 +39,11 @@
     "nixpkgs-src": {
       "flake": false,
       "locked": {
-        "lastModified": 1782636521,
-        "narHash": "sha256-OG8laCOGtkxlB1JH3XqOnXxnkGJme4mQdXo5hkhCQIY=",
+        "lastModified": 1786858016,
+        "narHash": "sha256-Vczr2zxD0orq6N2QQe5uqOGF7TRDcQJRRuAcsdHr4kg=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "e1c1b84752fb0897897380a3cae9dc7fcab91ca3",
+        "rev": "54ba4bcec4043e72a4006d825e0d7aff5562008f",
         "type": "github"
       },
       "original": {
@@ -55,16 +55,16 @@
     },
     "nixpkgs-unstable": {
       "locked": {
-        "lastModified": 1784356753,
-        "narHash": "sha256-12KrbMiWLcf8m7pCvAtZh1ZrgF85ZXDXvfR/fWTKy84=",
+        "lastModified": 1787201333,
+        "narHash": "sha256-YElrViL7Km6jOPcoPJK/OqXnF95nD8Ibc/qAUlcVM3Q=",
         "owner": "NixOS",
         "repo": "nixpkgs",
-        "rev": "61b7c44c4073f0b827768aff0049561b5110ea5a",
+        "rev": "ca3853d32223b08a75a5d45a54953d2f93d15de4",
         "type": "github"
       },
       "original": {
         "owner": "NixOS",
-        "ref": "nixos-unstable",
+        "ref": "nixos-unstable-small",
         "repo": "nixpkgs",
         "type": "github"
       }

devenv.nix

@@ -2,7 +2,27 @@
 
 let
   pkgs-unstable = import inputs.nixpkgs-unstable { system = pkgs.stdenv.system; };
+  # nixpkgs still ships golangci-lint 2.12.2 built with go 1.26, which refuses
+  # a go.mod targeting 1.27; drop when nixpkgs bumps to >= 2.13.0 on go 1.27
+  golangci-lint-go127 =
+    (pkgs-unstable.golangci-lint.override {
+      buildGo126Module = pkgs-unstable.buildGo127Module;
+    }).overrideAttrs (finalAttrs: prev: {
+      version = "2.13.0";
+      src = pkgs-unstable.fetchFromGitHub {
+        owner = "golangci";
+        repo = "golangci-lint";
+        tag = "v${finalAttrs.version}";
+        hash = "sha256-WWKvf1uQr8QK0Ja+EjN0YbLMX27N23HvyfFFKfjQ1gg=";
+      };
+      vendorHash = "sha256-thmkiCuE4FnVTIExfwN7xm6xioxz4C+tagvIsre/s5A=";
+    });
 in {
+  # staticcheck 2026.1 tests panic when rebuilt with go 1.27; drop when nixpkgs ships a fixed release
+  overlays = [
+    (final: prev: { go-tools = prev.go-tools.overrideAttrs (_: { doCheck = false; }); })
+  ];
+
   scripts.patch-sass-embedded.exec = ''
   find node_modules/.pnpm/sass-embedded-linux-*/node_modules/sass-embedded-linux-*/dart-sass/src -name dart -print0 | xargs -I {} -0 patchelf --set-interpreter "$(<$NIX_CC/nix-support/dynamic-linker)" {}
   '';
@@ -14,7 +34,7 @@ in {
     crowdin-cli
     nfpm
     # API tools
-    golangci-lint mage
+    golangci-lint-go127 mage
     # Desktop
     electron
     # Font processing tools
@@ -38,7 +58,7 @@ in {
 
     go = {
       enable = true;
-      package = pkgs-unstable.go;
+      package = pkgs-unstable.go_1_27;
       enableHardeningWorkaround = true;
     };
   };

devenv.yaml

@@ -3,7 +3,7 @@ inputs:
   nixpkgs:
     url: github:cachix/devenv-nixpkgs/rolling
   nixpkgs-unstable:
-    url: github:NixOS/nixpkgs/nixos-unstable
+    url: github:NixOS/nixpkgs/nixos-unstable-small
 
 # If you're using non-OSS software, you can set allowUnfree to true.
 allowUnfree: true