bump: golang version to fix CVE-2024-24790 and CVE-2024-34156 (#1562)

Signed-off-by: Billy Zha <[email protected]>

.github/workflows/build.yml

@@ -27,7 +27,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        go-version: ['1.22']
+        go-version: ['1.23']
       fail-fast: true
     steps:
       - name: Checkout

.github/workflows/release-github.yml

@@ -29,7 +29,7 @@ jobs:
       - name: setup go environment
         uses: actions/setup-go@v5
         with:
-          go-version: '1.22.3'
+          go-version: '1.23.1'
       - name: run goreleaser
         uses: goreleaser/goreleaser-action@v5
         with:

Dockerfile

@@ -11,7 +11,7 @@
 # See the License for the specific language governing permissions and
 # limitations under the License.
 
-FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.22.3-alpine as builder
+FROM --platform=$BUILDPLATFORM docker.io/library/golang:1.23.1-alpine as builder
 ARG TARGETPLATFORM
 RUN apk add git make
 ENV ORASPKG /oras

cmd/oras/internal/display/status/print_test.go

@@ -16,7 +16,7 @@ limitations under the License.
 package status
 
 import (
-	"fmt"
+	"errors"
 	"strconv"
 	"strings"
 	"testing"
@@ -33,7 +33,7 @@ func (mw *mockWriter) Write(p []byte) (n int, err error) {
 		return len(string(p)), nil
 	}
 	mw.errorCount++
-	return 0, fmt.Errorf("Boom: " + string(p))
+	return 0, errors.New("Boom: " + string(p))
 }
 
 func (mw *mockWriter) String() string {

go.mod

@@ -1,6 +1,6 @@
 module oras.land/oras
 
-go 1.22.0
+go 1.23.0
 
 require (
 	github.com/Masterminds/sprig/v3 v3.2.3

snapcraft.yaml

@@ -34,7 +34,7 @@ parts:
       - on amd64 to {ARCH}:
         - TARGET_ARCH: "{ARCH}"
     build-snaps:
-      - go/1.22/stable
+      - go/1.23/stable
     build-packages:
       - make
     stage-packages:

test/e2e/go.mod

@@ -1,6 +1,6 @@
 module oras.land/oras/test/e2e
 
-go 1.22.0
+go 1.23.0
 
 require (
 	github.com/onsi/ginkgo/v2 v2.19.0

test/e2e/go.work

@@ -1,4 +1,4 @@
-go 1.22.0
+go 1.23.0
 
 use (
 	.