Fix vet check (#5134)

... and pin toolchain.

.github/workflows/vulncheck.yml

@@ -16,7 +16,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: 1.23.4
+          go-version: 1.23.6
       - name: Get official govulncheck
         run: go install golang.org/x/vuln/cmd/govulncheck@latest
         shell: bash

cmd/client-s3_test.go

@@ -26,7 +26,7 @@ import (
 	"net/http/httptest"
 	"strconv"
 
-	minio "github.com/minio/minio-go/v7"
+	"github.com/minio/minio-go/v7"
 	checkv1 "gopkg.in/check.v1"
 )
 
@@ -181,13 +181,12 @@ func (h stsHandler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 			w.Header().Set("Server", "MinIO")
 			w.Write(response)
 			return
-		} else {
-			response := []byte("<ErrorResponse xmlns=\"https://sts.amazonaws.com/doc/2011-06-15/\"><Error><Type></Type><Code>AccessDenied</Code><Message>Access denied: Invalid Token</Message></Error><RequestId></RequestId></ErrorResponse>")
-			w.Header().Set("Content-Length", strconv.Itoa(len(response)))
-			w.Header().Set("Content-Type", "application/xml")
-			w.Write(response)
-			return
 		}
+		response := []byte("<ErrorResponse xmlns=\"https://sts.amazonaws.com/doc/2011-06-15/\"><Error><Type></Type><Code>AccessDenied</Code><Message>Access denied: Invalid Token</Message></Error><RequestId></RequestId></ErrorResponse>")
+		w.Header().Set("Content-Length", strconv.Itoa(len(response)))
+		w.Header().Set("Content-Type", "application/xml")
+		w.Write(response)
+		return
 	}
 }
 

go.mod

@@ -2,6 +2,8 @@ module github.com/minio/mc
 
 go 1.23
 
+toolchain go1.23.6
+
 require (
 	github.com/charmbracelet/bubbles v0.20.0
 	github.com/charmbracelet/bubbletea v1.2.4