Add action to auto bump go

.github/workflows/golangci-lint.yml

@@ -12,13 +12,14 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
-      - name: Install Go
-        uses: actions/setup-go@v5
-        with:
-          go-version: "1.22"
       - uses: actions/checkout@v4
         with:
           fetch-depth: '0'
+      - name: Set Up Go
+        uses: actions/setup-go@v5
+        with:
+          go-version-file: go.mod
+          check-latest: true
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v6
         with:

.github/workflows/release.yml

@@ -18,10 +18,11 @@ jobs:
         with:
           fetch-depth: 0
 
-      - name: Install Go
+      - name: Set Up Go
         uses: actions/setup-go@v5
         with:
-          go-version: '1.22'
+          go-version-file: go.mod
+          check-latest: true
 
       - name: Set up Cosign
         uses: sigstore/cosign-installer@v3    

.github/workflows/test-all.yml

@@ -10,15 +10,16 @@ jobs:
     name: Test All
     runs-on: ubuntu-latest
     steps:
-    - name: Install Go
-      uses: actions/setup-go@v5
-      with:
-        go-version: '1.22'
     - name: Check out code into the Go module directory
       uses: actions/checkout@v4
       with:
         path: src/github.com/${{ github.repository }}
         fetch-depth: 0
+    - name: Set Up Go
+      uses: actions/setup-go@v5
+      with:
+        go-version-file: src/github.com/${{ github.repository }}/go.mod
+        check-latest: true
     - name: Run Tests
       run: |
         set -e -x

.github/workflows/test-windows.yml

@@ -10,12 +10,13 @@ jobs:
     name: Test Windows
     runs-on: windows-latest
     steps:
-    - name: Install Go
-      uses: actions/setup-go@v5
-      with:
-        go-version: '1.22'
     - name: Check out code into the Go module directory
       uses: actions/checkout@v4
+    - name: Set Up Go
+      uses: actions/setup-go@v5
+      with:
+        go-version-file: go.mod
+        check-latest: true
     - name: Run Tests
       shell: powershell
       run: |

.github/workflows/trivy-scan.yml

@@ -11,7 +11,6 @@ jobs:
     with:
       repo: carvel-dev/ytt
       tool: ytt
-      goVersion: '1.22'
     secrets:
       githubToken: ${{ secrets.GITHUB_TOKEN }}
       slackWebhookURL: ${{ secrets.SLACK_WEBHOOK_URL }}

.github/workflows/update-go.yml

@@ -0,0 +1,39 @@
+name: go-updater
+
+on:
+  schedule:
+    - cron: '0 12 * * *'
+  workflow_dispatch:
+
+jobs:
+  update-go:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - name: Set up Go 1.x
+        uses: actions/setup-go@v5
+        with:
+          go-version: 'stable'
+          check-latest: true
+      - name: Update Go
+        run: go get go
+      - name: Create Pull Request
+        uses: peter-evans/create-pull-request@v6
+        with:
+          token: ${{ secrets.CARVEL_BOT_ACCESS_TOKEN }}
+          committer: Carvel Bot <[email protected]>
+          author: Carvel Bot <[email protected]>
+          commit-message: |
+            Bump go
+
+            Signed-off-by: Carvel Bot <[email protected]>
+          title: Bump go
+          delete-branch: true
+          body: |
+            Auto-generated by https://github.com/${{github.repository}}/actions/runs/${{github.run_id}}
+            Signed-off-by: Carvel Bot <[email protected]>
+          base: develop
+          branch: bump-go

go.mod

@@ -1,6 +1,6 @@
 module carvel.dev/ytt
 
-go 1.22.5
+go 1.23.2
 
 require (
 	github.com/BurntSushi/toml v1.2.1