From aa121a995f7b4960428d885718314548a6c97918 Mon Sep 17 00:00:00 2001
From: cpanato <ctadeu@gmail.com>
Date: Wed, 11 Sep 2024 09:38:08 -0500
Subject: [PATCH] build with go1.23 and general housekeeping

Signed-off-by: cpanato <ctadeu@gmail.com>
---
 .github/workflows/build.yaml                    | 1 +
 .github/workflows/image.yaml                    | 1 -
 .github/workflows/kind-e2e.yaml                 | 4 ++--
 .github/workflows/modules-integration-test.yaml | 2 +-
 .github/workflows/release.yml                   | 2 --
 .github/workflows/verify.yaml                   | 2 +-
 .golangci.yaml                                  | 6 ++++++
 go.mod                                          | 2 +-
 8 files changed, 12 insertions(+), 8 deletions(-)

diff --git a/.github/workflows/build.yaml b/.github/workflows/build.yaml
index f2313420c..03588b593 100644
--- a/.github/workflows/build.yaml
+++ b/.github/workflows/build.yaml
@@ -13,6 +13,7 @@ jobs:
       matrix:
         go-version:
           - '1.22'
+          - '1.23'
 
     name: Build ${{ matrix.go-version }}
     runs-on: ubuntu-latest
diff --git a/.github/workflows/image.yaml b/.github/workflows/image.yaml
index 30e12060f..b1d603a49 100644
--- a/.github/workflows/image.yaml
+++ b/.github/workflows/image.yaml
@@ -27,7 +27,6 @@ jobs:
       - name: Publish and sign image
         env:
           KO_DOCKER_REPO: ghcr.io/${{ github.repository }}
-          COSIGN_EXPERIMENTAL: 'true'
         run: |
           go build ./
           echo "${{ github.token }}" | ./ko login ghcr.io --username "${{ github.actor }}" --password-stdin
diff --git a/.github/workflows/kind-e2e.yaml b/.github/workflows/kind-e2e.yaml
index 8f5a1b6ba..ef8cccff7 100644
--- a/.github/workflows/kind-e2e.yaml
+++ b/.github/workflows/kind-e2e.yaml
@@ -30,7 +30,7 @@ jobs:
       run: go install ./
 
     - name: Setup Cluster
-      uses: chainguard-dev/actions/setup-kind@f94883c3bd16936401291899070258f855b5d849 # main
+      uses: chainguard-dev/actions/setup-kind@29fb6e979a0b3efc79748a17e8cec08d0594cbfd # main
       with:
         k8s-version: v1.28.x
         registry-authority: ${{ env.REGISTRY_NAME }}:${{ env.REGISTRY_PORT }}
@@ -65,4 +65,4 @@ jobs:
 
     - name: Collect diagnostics and upload
       if: ${{ failure() }}
-      uses: chainguard-dev/actions/kind-diag@84c993eaf02da1c325854fb272a4df9184bd80fc # main
+      uses: chainguard-dev/actions/kind-diag@29fb6e979a0b3efc79748a17e8cec08d0594cbfd # main
diff --git a/.github/workflows/modules-integration-test.yaml b/.github/workflows/modules-integration-test.yaml
index 90e4ba860..652d31527 100644
--- a/.github/workflows/modules-integration-test.yaml
+++ b/.github/workflows/modules-integration-test.yaml
@@ -11,8 +11,8 @@ jobs:
     strategy:
       matrix:
         go-version:
-          - '1.21'
           - '1.22'
+          - '1.23'
 
     runs-on: 'ubuntu-latest'
     steps:
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index bed42e329..f914b7be9 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -29,8 +29,6 @@ jobs:
 
       # This installs the current latest release.
       - uses: ko-build/setup-ko@3aebd0597dc1e9d1a26bcfdb7cbeb19c131d3037 # v0.7
-        with:
-          version: v0.15.2
 
       - uses: imjasonh/setup-crane@31b88efe9de28ae0ffa220711af4b60be9435f6e # v0.4
 
diff --git a/.github/workflows/verify.yaml b/.github/workflows/verify.yaml
index 7ba76e3d0..c3a38be15 100644
--- a/.github/workflows/verify.yaml
+++ b/.github/workflows/verify.yaml
@@ -32,4 +32,4 @@ jobs:
       - name: golangci-lint
         uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 # v6.1.0
         with:
-          version: v1.57
+          version: v1.61
diff --git a/.golangci.yaml b/.golangci.yaml
index 17edd59fb..6e12d9608 100644
--- a/.golangci.yaml
+++ b/.golangci.yaml
@@ -27,3 +27,9 @@ linters:
   disable:
     - errcheck
     - depguard
+
+linters-settings:
+  gosec:
+    excludes:
+      # TODO: Check those example in pkg/caps/caps.go:131
+      - G115  # Potential integer overflow when converting between integer types
diff --git a/go.mod b/go.mod
index 3cfb475cc..fb0b531c6 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/google/ko
 
-go 1.22.3
+go 1.22.7
 
 require (
 	github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20240514230400-03fa26f5508f