Bump Go version (1.21.8) and dependencies for CVE fixes

.circleci/config.yml

@@ -3,7 +3,7 @@ version: 2.1
 parameters:
   goImage:
     type: string
-    default: "gcr.io/gcr-for-testing/golang:1.21.6"
+    default: "gcr.io/gcr-for-testing/golang:1.21.8"
   arangodbImage:
     type: string
     default: "gcr.io/gcr-for-testing/arangodb/enterprise-preview:devel-nightly"
@@ -17,7 +17,7 @@ parameters:
 executors:
   golang-executor:
     docker:
-      - image: gcr.io/gcr-for-testing/golang:1.21.6
+      - image: gcr.io/gcr-for-testing/golang:1.21.8
   machine-executor:
     machine:
       image: ubuntu-2204:current

CHANGELOG.md

@@ -2,6 +2,7 @@
 
 ## [master](https://github.com/arangodb-helper/arangodb/tree/master) (N/A)
 - Remove deprecated ArangoSync component and ActiveFailover mode
+- Bump Go version (1.21.8) and dependencies for CVE fixes
 
 ## [v0.18.3](https://github.com/arangodb-helper/arangodb/tree/0.18.3) (2024-03-05)
 - Mark ArangoSync component as deprecated

Makefile

@@ -40,7 +40,7 @@ REPOPATH := $(ORGPATH)/$(REPONAME)
 ALPINE_IMAGE ?= alpine:3.18
 
 GOPATH := $(GOBUILDDIR)
-GOVERSION := 1.21.6
+GOVERSION := 1.21.8
 GOIMAGE ?= golang:$(GOVERSION)-alpine3.18
 
 GOOS ?= linux