fix: handle Go 1.26 GOEXPERIMENT version format change

[VedantMadane]

Description

Go 1.26 changed the format used to embed GOEXPERIMENT flags in the binary's build info from \ X:\ separator (Go <=1.25) to -X:\ separator (Go >=1.26). Trivy was failing to correctly parse the stdlib version from binaries built with Go 1.26 when GOEXPERIMENT flags are present.

Changes

• Strip both GOEXPERIMENT separator formats when parsing stdlib version: \ X:foo\ (Go <=1.25) and -X:foo\ (Go >=1.26)
• Extract version parsing logic to \parseStdlibVersion\ for testability
• Add unit tests for both format variants

Testing

• Added \TestParseStdlibVersion\ with test cases for plain version, Go <=1.25 format (\go1.25.3 X:nodwarf5), and Go >=1.26 format (\go1.26.0-X:nodwarf5)
• Existing \goexperiment\ integration test continues to pass

Fixes #10350

[CLAassistant]

All committers have signed the CLA.

[DmitriyLewen]

Hello @VedantMadane
Thanks for your contribution!

left a comment. Take a look, when you have time, please.

[DmitriyLewen]

I think you can use export_test.go file for this test (instead of creating new file (parse_internal_test.go.)
e.g.

diff --git a/pkg/dependency/parser/golang/binary/export_test.go b/pkg/dependency/parser/golang/binary/export_test.go
index 3f361bc1e..2c0bb7545 100644
--- a/pkg/dependency/parser/golang/binary/export_test.go
+++ b/pkg/dependency/parser/golang/binary/export_test.go
@@ -13,3 +13,6 @@ func (p *Parser) ChooseMainVersion(version, ldflagsVersion, elfVersion string) s
 func (p *Parser) ELFSymbolVersion(r io.ReaderAt, name string) string {
 	return p.elfSymbolVersion(r, name)
 }
+
+
+var ParseStdlibVersion = parseStdlibVersion
\ No newline at end of file
diff --git a/pkg/dependency/parser/golang/binary/parse_internal_test.go b/pkg/dependency/parser/golang/binary/parse_internal_test.go
index bece0aeff..3a0102b8c 100644
--- a/pkg/dependency/parser/golang/binary/parse_internal_test.go
+++ b/pkg/dependency/parser/golang/binary/parse_internal_test.go
@@ -1,8 +1,9 @@
-package binary
+package binary_test
 
 import (
 	"testing"
 
+	"github.com/aquasecurity/trivy/pkg/dependency/parser/golang/binary"
 	"github.com/stretchr/testify/assert"
 )
 
@@ -40,7 +41,7 @@ func TestParseStdlibVersion(t *testing.T) {
 	}
 	for _, tt := range tests {
 		t.Run(tt.name, func(t *testing.T) {
-			got := parseStdlibVersion(tt.goVersion)
+			got := binary.ParseStdlibVersion(tt.goVersion)
 			assert.Equal(t, tt.want, got)
 		})
 	}

[DmitriyLewen]

Hello @VedantMadane

I see that you did a rebase, but I don't see the suggested changes.
Let me know if you need my help.

Regards, Dmitriy