chore: bump go minor version to fix CVE findings

Signed-off-by: Mario Constanti <[email protected]>

.github/workflows/build.yml

@@ -21,7 +21,7 @@ jobs:
 
       - uses: actions/setup-go@v4
         with:
-          go-version: '1.21'
+          go-version: '1.21.3'
 
       - name: make verify
         run: make verify

.github/workflows/foss.yaml

@@ -16,7 +16,7 @@ jobs:
     - name: Set up Go 1.x
       uses: actions/setup-go@v4
       with:
-        go-version: '1.21'
+        go-version: '1.21.3'
       id: go
 
     - name: Checkout code

.github/workflows/release.yml

@@ -29,7 +29,7 @@ jobs:
       - run: git fetch --force --tags
       - uses: actions/setup-go@v4
         with:
-          go-version: '1.21'
+          go-version: '1.21.3'
 
       - name: Synopsys Detect
         run: |

Dockerfile

@@ -1,6 +1,6 @@
 # SPDX-License-Identifier: MIT
 # Build the manager binary
-FROM golang:1.21 as builder
+FROM golang:1.21.3 as builder
 ARG TARGETOS
 ARG TARGETARCH
 

Makefile

@@ -166,7 +166,7 @@ KUSTOMIZE_VERSION ?= v5.0.1
 CONTROLLER_TOOLS_VERSION ?= v0.12.0
 GOLANGCI_LINT_VERSION ?= v1.53.3
 MOCKGEN_VERSION ?= v0.2.0
-GORELEASER_VERSION ?= v1.21.0
+GORELEASER_VERSION ?= v1.21.3.0
 MDTOC_VERSION ?= v1.1.0
 SLICE_VERSION ?= v1.2.6
 NANCY_VERSION ?= v1.0.42

go.mod

@@ -1,7 +1,7 @@
 // SPDX-License-Identifier: MIT
 module github.com/mercedes-benz/garm-operator
 
-go 1.21
+go 1.21.3
 
 require (
 	github.com/cloudbase/garm v0.1.3