chore: restore CentOS Stream targets in Packit config

Re-enable centos-stream-9 and centos-stream-10 targets for
copr_build and tests jobs. go-vendor-tools is now available
via EPEL for both platforms:

- EPEL 9:    go-vendor-tools-0.12.0-1.el9
- EPEL 10.1: go-vendor-tools-0.12.0-1.el10_1

Add EPEL additional_repos for CentOS Stream targets so the
mock buildroot can find go-vendor-tools during COPR builds.

Add generic Go version workaround to spec %prep section to
handle cases where the system Go has an older patch version
than what go.mod requires (e.g., CentOS Stream Go 1.26.7 vs
go.mod 1.26.8). Uses go\K regex anchor for reliable version
extraction.

Assisted-by: OpenCode (claude-opus-4-6)
Signed-off-by: Marcus Burghardt <maburgha@redhat.com>

Author: marcusburghardt

.packit.yaml

@@ -25,25 +25,31 @@ jobs:
     - job: copr_build
       trigger: pull_request
       targets:
-          - fedora-rawhide-x86_64
-          - fedora-45-x86_64
-          - fedora-44-x86_64
-          - fedora-43-x86_64
-          # CentOS Stream targets removed: go-vendor-tools is not
-          # available in CentOS Stream repos. Restore when the
-          # tooling becomes available on those platforms.
+          fedora-rawhide-x86_64: {}
+          fedora-45-x86_64: {}
+          fedora-44-x86_64: {}
+          fedora-43-x86_64: {}
+          centos-stream-10-x86_64:
+              additional_repos:
+                  - https://dl.fedoraproject.org/pub/epel/10/Everything/x86_64/
+          centos-stream-9-x86_64:
+              additional_repos:
+                  - https://dl.fedoraproject.org/pub/epel/9/Everything/x86_64/
 
     # Running tests using testing farm https://packit.dev/docs/configuration/upstream/tests
     - job: tests
       trigger: pull_request
       targets:
-          - fedora-rawhide-x86_64
-          - fedora-45-x86_64
-          - fedora-44-x86_64
-          - fedora-43-x86_64
-          # CentOS Stream targets removed: go-vendor-tools is not
-          # available in CentOS Stream repos. Restore when the
-          # tooling becomes available on those platforms.
+          fedora-rawhide-x86_64: {}
+          fedora-45-x86_64: {}
+          fedora-44-x86_64: {}
+          fedora-43-x86_64: {}
+          centos-stream-10-x86_64:
+              additional_repos:
+                  - https://dl.fedoraproject.org/pub/epel/10/Everything/x86_64/
+          centos-stream-9-x86_64:
+              additional_repos:
+                  - https://dl.fedoraproject.org/pub/epel/9/Everything/x86_64/
 
     # https://packit.dev/docs/fedora-releases-guide
     # Propose Downstream PRs once a Upstream release is out

complyctl.spec

@@ -38,6 +38,15 @@ Providers are distributed separately via the complytime-providers package.
 %setup -q -T -D -a1 %{forgesetupargs}
 %autopatch -p1
 
+# Lower the go.mod directive to match the system Go version so
+# rpmbuild succeeds with GOTOOLCHAIN=local. This handles cases where
+# the system Go has the same major.minor but an older patch version
+# than what go.mod requires (e.g., system Go 1.26.7 vs go.mod 1.26.8).
+# Reference: https://packages.fedoraproject.org/pkgs/golang/golang/
+SYSTEM_GO_VERSION=$(go version | grep -oP 'go\K[0-9]+\.[0-9]+\.[0-9]+')
+sed -i "s/^go [0-9].*/go ${SYSTEM_GO_VERSION}/" go.mod
+sed -i "/^## explicit; go /s/go [0-9]\..*/go ${SYSTEM_GO_VERSION}/" vendor/modules.txt
+
 %generate_buildrequires
 %go_vendor_license_buildrequires -c %{S:2}