bump deps and fix goreleaser error

.github/workflows/golangci-lint.yml

@@ -21,7 +21,7 @@ on:
 permissions:
   contents: read
 env:
-  GO_VERSION: 1.22.5
+  GO_VERSION: 1.23.4
 jobs:
   golangci:
     name: lint

.github/workflows/license.yml

@@ -21,7 +21,7 @@ on:
   pull_request:
 
 env:
-  GO_VERSION: 1.22.0
+  GO_VERSION: 1.23.4
 
 jobs:
   license-check:

.github/workflows/linux.yml

@@ -25,7 +25,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        go: [ '1.21.x', '1.22.x' ]
+        go: [ '1.22.x', '1.23.x' ]
     name: Go ${{ matrix.go }} build
     steps:
       - name: checkout

.github/workflows/release.yml

@@ -24,7 +24,7 @@ permissions:
   id-token: write # needed for keyless signing
   packages: write # needed to upload artifacts
 env:
-  GO_VERSION: 1.22.5
+  GO_VERSION: 1.23.4
 
 jobs:
   release:

.gitignore

@@ -9,3 +9,7 @@ cmd/crypki/crypki
 docker-softhsm/log
 docker-softhsm/tls-crt
 tools_bin/
+crypki-sbom.spdx.json
+results.sarif
+
+dist/

.goreleaser.yml

@@ -1,3 +1,4 @@
+version: 2
 project_name: crypki
 
 gomod:
@@ -7,8 +8,6 @@ env:
   - GO111MODULE=on
   - COSIGN_YES=true
   - CGO_ENABLED=1 # required for miekg/pkcs11
-
-
 sboms:
 - artifacts: binary
 

go.mod

@@ -1,27 +1,27 @@
 module github.com/theparanoids/crypki
 
-go 1.22
+go 1.22.7
 
-toolchain go1.23.0
+toolchain go1.23.4
 
 require (
 	github.com/golang/mock v1.6.0
 	github.com/grpc-ecosystem/go-grpc-middleware v1.4.0
-	github.com/grpc-ecosystem/grpc-gateway/v2 v2.23.0
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.24.0
 	github.com/miekg/pkcs11 v1.1.1
-	github.com/stretchr/testify v1.9.0
-	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.56.0
-	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0
-	go.opentelemetry.io/otel v1.32.0
-	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.32.0
-	go.opentelemetry.io/otel/metric v1.32.0
-	go.opentelemetry.io/otel/sdk v1.32.0
-	go.opentelemetry.io/otel/sdk/metric v1.32.0
-	golang.org/x/crypto v0.29.0
-	google.golang.org/genproto/googleapis/api v0.0.0-20241104194629-dd2ea8efbc28
+	github.com/stretchr/testify v1.10.0
+	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.58.0
+	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.58.0
+	go.opentelemetry.io/otel v1.33.0
+	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.33.0
+	go.opentelemetry.io/otel/metric v1.33.0
+	go.opentelemetry.io/otel/sdk v1.33.0
+	go.opentelemetry.io/otel/sdk/metric v1.33.0
+	golang.org/x/crypto v0.31.0
+	google.golang.org/genproto/googleapis/api v0.0.0-20241209162323-e6fa225c2576
 	google.golang.org/grpc v1.69.0
 	google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.5.1
-	google.golang.org/protobuf v1.35.1
+	google.golang.org/protobuf v1.35.2
 )
 
 require (
@@ -33,14 +33,15 @@ require (
 	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/google/uuid v1.6.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	go.opentelemetry.io/otel/trace v1.32.0 // indirect
-	go.opentelemetry.io/proto/otlp v1.3.1 // indirect
-	golang.org/x/mod v0.20.0 // indirect
-	golang.org/x/net v0.30.0 // indirect
-	golang.org/x/sync v0.9.0 // indirect
-	golang.org/x/sys v0.27.0 // indirect
-	golang.org/x/text v0.20.0 // indirect
-	golang.org/x/tools v0.24.0 // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20241104194629-dd2ea8efbc28 // indirect
+	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
+	go.opentelemetry.io/otel/trace v1.33.0 // indirect
+	go.opentelemetry.io/proto/otlp v1.4.0 // indirect
+	golang.org/x/mod v0.22.0 // indirect
+	golang.org/x/net v0.32.0 // indirect
+	golang.org/x/sync v0.10.0 // indirect
+	golang.org/x/sys v0.28.0 // indirect
+	golang.org/x/text v0.21.0 // indirect
+	golang.org/x/tools v0.28.0 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20241209162323-e6fa225c2576 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )