chore: bump go to 1.26.5 and update dependencies

nix/package.nix

@@ -1,5 +1,4 @@
 { lib
-, stdenv
 , buildGoModule
 , go_1_26
 , rev ? "unknown"
@@ -8,11 +7,11 @@
 
 (buildGoModule.override { go = go_1_26; }) (finalAttrs: {
   pname = "sarin";
-  version = "1.3.2"; # bump per release
+  version = "1.4.0"; # bump per release
 
   src = lib.cleanSource ../.;
 
-  vendorHash = "sha256-BMH0alJeZoK/8cE9Y+s++G7D+Dg5xcZNTU4zkRMBpfU=";
+  vendorHash = "sha256-/r2mioVoMbrboumF0sjHhharkGImQAShmiOQtdS5DaE=";
 
   subPackages = [ "cmd/cli" ];
 
@@ -24,11 +23,12 @@
     "-X=go.aykhans.me/sarin/internal/version.Version=v${finalAttrs.version}"
     "-X=go.aykhans.me/sarin/internal/version.GitCommit=${rev}"
     "-X=go.aykhans.me/sarin/internal/version.BuildDate=${buildDate}"
-    # Value has spaces, so it is single-quoted: `go build` splits -ldflags
-    # shell-style and honours the quotes, keeping this as one -X value.
-    "-X 'go.aykhans.me/sarin/internal/version.GoVersion=go version go${go_1_26.version} ${stdenv.hostPlatform.go.GOOS}/${stdenv.hostPlatform.go.GOARCH}'"
   ];
 
+  preBuild = ''
+    ldflags+=("-X 'go.aykhans.me/sarin/internal/version.GoVersion=$(go version)'")
+  '';
+
   # cmd/cli produces a binary named "cli"; rename it to "sarin".
   postInstall = ''
     mv $out/bin/cli $out/bin/sarin