Merge remote-tracking branch 'origin/upstream_merge_v1.14.8' into lma…

…rtins/upstream_merge_v1.14.10

.github/workflows/ci.yml

@@ -29,7 +29,7 @@ jobs:
 
         - uses: actions/setup-go@v5
           with:
-            go-version: 1.22.x
+            go-version: 1.23.x
 
         - name: Install dependencies on Linux
           if: runner.os == 'Linux'
@@ -61,7 +61,7 @@ jobs:
 
         - uses: actions/setup-go@v5
           with:
-            go-version: 1.22.x
+            go-version: 1.23.x
 
         - name: Install dependencies on Linux
           if: runner.os == 'Linux'
@@ -89,7 +89,7 @@ jobs:
 
         - uses: actions/setup-go@v5
           with:
-            go-version: 1.22.x
+            go-version: 1.23.x
 
         - name: Install dependencies on Linux
           if: runner.os == 'Linux'
@@ -140,7 +140,7 @@ jobs:
 
         - uses: actions/setup-go@v5
           with:
-            go-version: 1.22.x
+            go-version: 1.23.x
 
         - name: Install dependencies on Linux
           if: runner.os == 'Linux'
@@ -196,7 +196,7 @@ jobs:
 
         - uses: actions/setup-go@v5
           with:
-            go-version: 1.22.x
+            go-version: 1.23.x
 
         - name: Checkout matic-cli
           uses: actions/checkout@v4

.github/workflows/codeql.yml

@@ -25,7 +25,7 @@ jobs:
 
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
 
       - name: Install Go
         uses: actions/setup-go@v5

.github/workflows/govulncheck.yml

@@ -0,0 +1,23 @@
+name: Govuln
+on: [ push, pull_request ]
+
+jobs:
+  govulncheck:
+    name: Run govulncheck
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/setup-go@v5
+        with:
+          go-version: "1.23.6"
+          check-latest: true
+      - uses: actions/checkout@v4
+      - uses: technote-space/get-diff-action@v6
+        with:
+          PATTERNS: |
+            **/*.go
+            go.mod
+            go.sum
+            Makefile
+      - name: govulncheck
+        run: make vulncheck
+        if: "env.GIT_DIFF != ''"

.github/workflows/packager_deb.yml

@@ -24,7 +24,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@master
         with:
-          go-version: 1.22.1
+          go-version: 1.23.6
      # Variables
       - name: Adding TAG to ENV
         run: echo "GIT_TAG=`echo $(git describe --tags --abbrev=0)`" >> $GITHUB_ENV
@@ -126,4 +126,4 @@ jobs:
           prerelease: true
           files: |
             packaging/deb/bor**.deb
-            packaging/deb/bor**.deb.checksum
+            packaging/deb/bor**.deb.checksum

.github/workflows/release.yml

@@ -14,14 +14,14 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v2
+        uses: actions/checkout@v4
         with:
           fetch-depth: 0
 
       - name: Set up Go
         uses: actions/setup-go@master
         with:
-          go-version: 1.22.x
+          go-version: 1.23.x
 
       - name: Prepare
         id: prepare