Upgrade containerd to v1.5.7 because of a CVE + upgrade dependencies

.github/workflows/build-push-image.yml

@@ -9,7 +9,7 @@ jobs:
     steps:
       -
         name: Checkout
-        uses: actions/[email protected].4
+        uses: actions/[email protected].5
       -
         name: Prepare
         id: prep

.github/workflows/go-tests.yml

@@ -20,7 +20,7 @@ jobs:
       with:
         go-version: ${{ matrix.go-version }}
     - name: Checkout code
-      uses: actions/[email protected].4
+      uses: actions/[email protected].5
     - name: Download envtest dependencies
       uses: teddyking/[email protected]
       with:
@@ -39,6 +39,6 @@ jobs:
       env:
         KUBEBUILDER_ASSETS: /home/runner/work/_temp/_github_home/kubebuilder/bin
     - name: Send coverage
-      uses: shogo82148/actions-goveralls@v1.4.7
+      uses: shogo82148/actions-goveralls@v1.5.0
       with:
         path-to-profile: profile.cov

.github/workflows/golangci-lint.yml

@@ -12,7 +12,7 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/[email protected].4
+      - uses: actions/[email protected].5
       - name: golangci-lint
         uses: golangci/[email protected]
         with:

Dockerfile

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1-experimental
 
-FROM --platform=${BUILDPLATFORM} golang:1.17.0-alpine AS base
+FROM --platform=${BUILDPLATFORM} golang:1.17.2-alpine AS base
 
 WORKDIR /workspace
 ENV CGO_ENABLED=0

Dockerfile.dev

@@ -1,6 +1,6 @@
 # syntax=docker/dockerfile:1-experimental
 
-FROM --platform=${BUILDPLATFORM} golang:1.17.0-alpine AS base
+FROM --platform=${BUILDPLATFORM} golang:1.17.2-alpine AS base
 
 WORKDIR /workspace
 ENV CGO_ENABLED=0

go.mod

@@ -3,19 +3,20 @@ module github.com/annismckenzie/k3os-config-operator
 go 1.16
 
 require (
+	github.com/containerd/containerd v1.5.7 // indirect
 	github.com/go-logr/logr v0.4.0
 	github.com/jessevdk/go-flags v1.5.0
 	github.com/onsi/ginkgo v1.16.4
 	github.com/onsi/gomega v1.16.0
 	gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b
-	k8s.io/api v0.22.1
-	k8s.io/apimachinery v0.22.1
-	k8s.io/client-go v0.22.1
-	sigs.k8s.io/cluster-api v0.4.0 // indirect; uses master, added to use testing helpers
-	sigs.k8s.io/cluster-api/test v0.4.2
-	sigs.k8s.io/controller-runtime v0.10.0
+	k8s.io/api v0.22.2
+	k8s.io/apimachinery v0.22.2
+	k8s.io/client-go v0.22.2
+	sigs.k8s.io/cluster-api v0.4.4 // indirect; uses master, added to use testing helpers
+	sigs.k8s.io/cluster-api/test v0.4.4
+	sigs.k8s.io/controller-runtime v0.10.2
 )
 
-replace sigs.k8s.io/cluster-api => sigs.k8s.io/cluster-api v0.4.2
+replace sigs.k8s.io/cluster-api => sigs.k8s.io/cluster-api v0.4.4
 
 // replace sigs.k8s.io/controller-runtime => ../../../sigs.k8s.io/controller-runtime