Revert toolchain bumps; rely on CI image's system Go for fix

The previous commit bumped 'toolchain go1.25.9' across all 71 go.mod
files. That worked locally but broke the existing CI dev-environment
image, which:
  1. ships golangci-lint v1.64.8 built with Go 1.24 (rejects modules
     declaring toolchain >= 1.25)
  2. has system Go 1.24.13, so GOTOOLCHAIN=auto downloads the 1.25.9
     toolchain module — but that module's prebuilt tools dir lacks
     'covdata', breaking 'go test -coverprofile' for any Go library
     package.

Instead, leave the 'toolchain' directive at go1.24.13 and rely on the
new dev-environment image (which has system Go 1.25.9 from
dev/image/Dockerfile) to compile binaries with the patched stdlib.
Once branch CI publishes the new image, a follow-up commit will update
the image tag references in .gitpod.yml and the workflow files (same
two-step pattern as #21327).

Co-authored-by: Ona <no-reply@ona.com>

Author: geropl

WORKSPACE.yaml

@@ -71,9 +71,5 @@ defaultVariant:
         [
           "sh",
           "-c",
-          # --go=1.24 keeps lint compatible with the v1.64.x golangci-lint built into the
-          # CI dev-environment image (which is itself built with Go 1.24). Our toolchain bump
-          # to 1.25.9 only addresses CVE-2026-27143 in the Go stdlib; we don't use any 1.25
-          # language features.
-          "golangci-lint run --go=1.24 --disable govet,errcheck,staticcheck --allow-parallel-runners --timeout 15m",
+          "golangci-lint run --disable govet,errcheck,staticcheck --allow-parallel-runners --timeout 15m",
         ]

components/blobserve/go.mod

@@ -2,7 +2,7 @@ module github.com/gitpod-io/gitpod/blobserve
 
 go 1.24.0
 
-toolchain go1.25.9
+toolchain go1.24.13
 
 godebug tlsmlkem=0
 

components/common-go/go.mod

@@ -2,7 +2,7 @@ module github.com/gitpod-io/gitpod/common-go
 
 go 1.24.0
 
-toolchain go1.25.9
+toolchain go1.24.13
 
 godebug tlsmlkem=0
 

components/content-service-api/go/go.mod

@@ -2,7 +2,7 @@ module github.com/gitpod-io/gitpod/content-service/api
 
 go 1.24.0
 
-toolchain go1.25.9
+toolchain go1.24.13
 
 godebug tlsmlkem=0
 

components/content-service-api/typescript/util/go.mod

@@ -2,7 +2,7 @@ module github.com/gitpod-io/gitpod/content-service-api/util
 
 go 1.24.0
 
-toolchain go1.25.9
+toolchain go1.24.13
 
 godebug tlsmlkem=0
 

components/content-service/go.mod

@@ -2,7 +2,7 @@ module github.com/gitpod-io/gitpod/content-service
 
 go 1.24.0
 
-toolchain go1.25.9
+toolchain go1.24.13
 
 godebug tlsmlkem=0
 

components/docker-up/go.mod

@@ -2,7 +2,7 @@ module github.com/gitpod-io/gitpod/docker-up
 
 go 1.24
 
-toolchain go1.25.9
+toolchain go1.24.13
 
 godebug tlsmlkem=0
 

components/ee/agent-smith/cmd/testbed/go.mod

@@ -2,6 +2,6 @@ module testbed
 
 go 1.24
 
-toolchain go1.25.9
+toolchain go1.24.13
 
 godebug tlsmlkem=0

components/ee/agent-smith/cmd/testtarget/go.mod

@@ -2,6 +2,6 @@ module testtarget
 
 go 1.24
 
-toolchain go1.25.9
+toolchain go1.24.13
 
 godebug tlsmlkem=0

components/ee/agent-smith/go.mod

@@ -2,7 +2,7 @@ module github.com/gitpod-io/gitpod/agent-smith
 
 go 1.24.0
 
-toolchain go1.25.9
+toolchain go1.24.13
 
 godebug tlsmlkem=0