0.40.x fix CVE

.github/workflows/golangci-lint.yml

@@ -12,11 +12,15 @@ jobs:
     name: lint
     runs-on: ubuntu-latest
     steps:
+      - name: Install Go
+        uses: actions/setup-go@v3
+        with:
+          go-version: "1.19.3"
       - uses: actions/checkout@v2
         with:
           fetch-depth: '0'
       - name: golangci-lint
         uses: golangci/golangci-lint-action@v2
         with:
-          version: v1.41.1
+          version: v1.45.2
           args: -v

.github/workflows/release.yml

@@ -20,7 +20,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v2
         with:
-          go-version: 1.17.0
+          go-version: 1.19.3
 
       - name: generate website/generate.go
         if: startsWith(github.ref, 'refs/tags/')

.github/workflows/test-all.yml

@@ -13,7 +13,7 @@ jobs:
     - name: Set up Go 1.x
       uses: actions/setup-go@v1
       with:
-        go-version: "1.17"
+        go-version: "1.19.3"
     - name: Check out code into the Go module directory
       uses: actions/checkout@v2
       with:

.github/workflows/test-windows.yml

@@ -13,7 +13,7 @@ jobs:
     - name: Set up Go 1.x
       uses: actions/setup-go@v1
       with:
-        go-version: "1.17"
+        go-version: "1.19.3"
     - name: Check out code into the Go module directory
       uses: actions/checkout@v2
     - name: Run Tests

.github/workflows/trivy-scan.yml

@@ -10,7 +10,7 @@ jobs:
     with:
       repo: vmware-tanzu/carvel-ytt
       tool: ytt
-      goVersion: 1.17.0
+      goVersion: 1.19.3
     secrets:
       githubToken: ${{ secrets.GITHUB_TOKEN }}
       slackWebhookURL: ${{ secrets.SLACK_WEBHOOK_URL }}

examples/integrating-with-ytt/internal-templating/go.mod

@@ -1,6 +1,6 @@
 module example_internal_templating
 
-go 1.17
+go 1.19
 
 require github.com/k14s/ytt v0.38.0
 

go.mod

@@ -1,6 +1,6 @@
 module github.com/vmware-tanzu/carvel-ytt
 
-go 1.17
+go 1.19
 
 require (
 	github.com/BurntSushi/toml v1.0.0