golang: bump 1.26 to 1.26.5

[AndyChiang888]

Fixes: CVE-2026-39822
Fixes: CVE-2026-42505
Changes: https://github.com/golang/go/issues?q=milestone%3AGo1.26.5+label%3ACherryPickApproved

📦 Package Details

Maintainer: @GeorgeSapkin
_{(You can find this by checking the history of the package Makefile.)}

Description:

---

🧪 Run Testing Details

• OpenWrt Version: SNAPSHOT
• OpenWrt Target/Subtarget: x86/64
• OpenWrt Device: N100

---

✅ Formalities

• I have reviewed the CONTRIBUTING.md file for detailed contributing guidelines.

If your PR contains a patch:

• It can be applied using git am
• It has been refreshed to avoid offsets, fuzzes, etc., using

  make package/<your-package>/refresh V=s

• It is structured in a way that it is potentially upstreamable
  _{(e.g., subject line, commit description, etc.)
  We must try to upstream patches to reduce maintenance burden.}

[openwrt]

Formality Check: Suggestions Available

We completed the verification flow. Please review the formatting overview logs below.

⚠️ STYLISTIC WARNINGS & SUGGESTIONS

Package Release Audit:

• ⚠️ Package lang/golang content changed without a PKG_RELEASE or version bump
• Do not increment release for minor changes. Cosmetic edits (e.g., typos in comments, copyright updates, formatting/whitespace), changing the package maintainer (PKG_MAINTAINER), or updating source download info (PKG_SOURCE_URL / PKG_HASH) do not require incrementing PKG_RELEASE.

---

_{Something broken? Consider reporting an issue.
Running version 254e9b9 deployed on 2026-07-10 21:13:48 CEST}