build: update toolchain to Go 1.25.3 (#26949)

We recently updated to Go 1.25.2 but upstream just released a fix for a TLS
certificate validation that the security patch introduced. Let's upgrade to
1.25.3 before we ship the 1.11.0 beta.

Ref: #26909
Ref: https://go.dev/doc/devel/release#go1.25.3

Author: tgross

.changelog/26949.txt

@@ -0,0 +1,3 @@
+```release-note:bug
+build: Updated toolchain to Go 1.25.3 to address bug in TLS certificate validation
+```

.go-version

@@ -1 +1 @@
-1.25.2
+1.25.3

contributing/README.md

@@ -52,7 +52,7 @@ A development environment is supplied via Vagrant to make getting started easier
 
 Developing without Vagrant
 ---
-1. Install [Go 1.25.2+](https://golang.org/) *(Note: `gcc-go` is not supported)*
+1. Install [Go 1.25.3+](https://golang.org/) *(Note: `gcc-go` is not supported)*
 1. Clone this repo
    ```sh
    $ git clone https://github.com/hashicorp/nomad.git

go.mod

@@ -1,6 +1,6 @@
 module github.com/hashicorp/nomad
 
-go 1.25.2
+go 1.25.3
 
 // Pinned dependencies are noted in github.com/hashicorp/nomad/issues/11826.
 replace (

scripts/linux-priv-go.sh

@@ -21,7 +21,7 @@ case $(arch) in
 esac
 
 function install_go() {
-	local go_version="1.25.2"
+	local go_version="1.25.3"
 	local download="https://storage.googleapis.com/golang/go${go_version}.linux-${ARCH}.tar.gz"
 
 	if go version 2>&1 | grep -q "${go_version}"; then

scripts/release/mac-remote-build

@@ -56,7 +56,7 @@ REPO_PATH="${TMP_WORKSPACE}/gopath/src/github.com/hashicorp/nomad"
 mkdir -p "${TMP_WORKSPACE}/tmp"
 
 install_go() {
-  local go_version="1.25.2"
+  local go_version="1.25.3"
   local download=
 
   download="https://storage.googleapis.com/golang/go${go_version}.darwin-amd64.tar.gz"