Merge pull request #381 from rohitagg2020/v0.34.x

[0.34.x] Fixing CVE and Updating go version to 1.22.3

.github/workflows/golangci-lint.yml

@@ -15,7 +15,7 @@ jobs:
       - name: Install Go
         uses: actions/setup-go@v3
         with:
-          go-version: 1.22.2
+          go-version: 1.22.3
       - uses: actions/checkout@v2
         with:
           fetch-depth: '0'

.github/workflows/release.yml

@@ -18,7 +18,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.22.2
+          go-version: 1.22.3
       - name: Retrieve version
         run: |
           echo "TAG_NAME=$(echo ${{ github.ref }}  | grep -Eo 'v[0-9].*')" >> $GITHUB_OUTPUT

.github/workflows/test-gh.yml

@@ -13,7 +13,7 @@ jobs:
     - name: Set up Go 1.x
       uses: actions/setup-go@v1
       with:
-        go-version: 1.22.2
+        go-version: 1.22.3
     - name: Check out code into the Go module directory
       uses: actions/checkout@v1
       with:

.github/workflows/trivy-scan.yml

@@ -10,7 +10,7 @@ jobs:
     with:
       repo: carvel-dev/vendir
       tool: vendir
-      goVersion: 1.22.2
+      goVersion: 1.22.3
     secrets:
       githubToken: ${{ secrets.GITHUB_TOKEN }}
       slackWebhookURL: ${{ secrets.SLACK_WEBHOOK_URL }}

go.mod

@@ -2,6 +2,8 @@ module github.com/vmware-tanzu/carvel-vendir
 
 go 1.22
 
+toolchain go1.22.3
+
 require (
 	github.com/bmatcuk/doublestar v1.2.1
 	github.com/carvel-dev/semver/v4 v4.0.1-0.20230221220520-8090ce423695