chore: update to go 1.18 (#628)

* add make lint to Makefile

coderd/database/postgres/postgres.go

@@ -138,5 +138,7 @@ func getFreePort() (port int, err error) {
 	}
 
 	defer listener.Close()
+	// This is always a *net.TCPAddr.
+	// nolint:forcetypeassert
 	return listener.Addr().(*net.TCPAddr).Port, nil
 }

coderd/database/pubsub.go

@@ -72,6 +72,9 @@ func (p *pgPubsub) Subscribe(event string, listener Listener) (cancel func(), er
 }
 
 func (p *pgPubsub) Publish(event string, message []byte) error {
+	// This is safe because we are calling pq.QuoteLiteral. pg_notify doesn't
+	// support the first parameter being a prepared statement.
+	//nolint:gosec
 	_, err := p.db.ExecContext(context.Background(), `select pg_notify(`+pq.QuoteLiteral(event)+`, $1)`, message)
 	if err != nil {
 		return xerrors.Errorf("exec: %w", err)