diff --git a/internal/cmd/context/create_test.go b/internal/cmd/context/create_test.go
index 0ae8b17be..b30a8d588 100644
--- a/internal/cmd/context/create_test.go
+++ b/internal/cmd/context/create_test.go
@@ -37,7 +37,7 @@ token = "super secret token"
 	}
 
 	testCases := []testCase{
-		{
+		{ //nolint:gosec
 			name:   "new context",
 			args:   []string{"new-context"},
 			isTerm: true,
@@ -64,7 +64,7 @@ Context new-context created and activated
 			err:    "non-interactive tty detected. Use --token-from-env to use HCLOUD_TOKEN from the environment",
 			expErr: "Error: non-interactive tty detected. Use --token-from-env to use HCLOUD_TOKEN from the environment\n",
 		},
-		{
+		{ //nolint:gosec
 			name:   "existing context",
 			args:   []string{"my-context"},
 			isTerm: true,
diff --git a/internal/cmd/util/util.go b/internal/cmd/util/util.go
index 7be0c4279..7d8704da4 100644
--- a/internal/cmd/util/util.go
+++ b/internal/cmd/util/util.go
@@ -401,7 +401,7 @@ func FormatHcloudError(err error) string {
 		errBuilder.WriteString(hcloudErr.Error())
 		for _, field := range details.Fields {
 			fieldMsg := strings.Join(field.Messages, ", ")
-			errBuilder.WriteString(fmt.Sprintf("\n- %s: %s", field.Name, fieldMsg))
+			fmt.Fprintf(&errBuilder, "\n- %s: %s", field.Name, fieldMsg)
 		}
 		return errBuilder.String()
 
diff --git a/mise.toml b/mise.toml
index ab246863b..bc14b7ed9 100644
--- a/mise.toml
+++ b/mise.toml
@@ -1,7 +1,7 @@
 [tools]
 go = "1.25.8"
 "go:go.uber.org/mock/mockgen" = "v0.6.0"
-"github:golangci/golangci-lint" = "2.8.0"
+"github:golangci/golangci-lint" = "2.11.3"
 "github:goreleaser/goreleaser" = "v2.14.3"
 "github:anchore/quill" = "v0.7.1"
 "github:jstemmer/go-junit-report" = "v2.1.0"
diff --git a/scripts/main.go b/scripts/main.go
index ea8bf14af..169798241 100644
--- a/scripts/main.go
+++ b/scripts/main.go
@@ -5,6 +5,7 @@ import (
 	"fmt"
 	"log"
 	"os"
+	"strconv"
 
 	"github.com/spf13/cobra"
 	"github.com/spf13/cobra/doc"
@@ -29,7 +30,7 @@ func main() {
 	case "manpages":
 		err = generateManPages()
 	default:
-		log.Fatalln("Unknown argument:", arg)
+		log.Fatalln("Unknown argument:", strconv.Quote(arg))
 	}
 	if err != nil {
 		log.Fatalln(err)