Merge pull request #98 from sudo-bmitch/pr-update-20250209

Version bump

.github/workflows/docker.yml

@@ -76,10 +76,10 @@ jobs:
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
+      uses: docker/setup-buildx-action@f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca # v3.9.0
 
     - name: Install cosign
-      uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
+      uses: sigstore/cosign-installer@c56c2d3e59e4281cc41dea2217323ba5694b171e # v3.8.0
 
     - name: Login to DockerHub
       if: github.repository_owner == 'sudo-bmitch'

.osv-scanner.toml

@@ -1 +1 @@
-GoVersionOverride = "1.23.5"
+GoVersionOverride = "1.23.6"

.version-bump.lock

@@ -1,24 +1,24 @@
 {"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.21.2","version":"sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099"}
 {"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.21.2"}
-{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.23.5-alpine","version":"sha256:47d337594bd9e667d35514b241569f95fb6d95727c24b19468813d596d5ae596"}
-{"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.23.5"}
+{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.23.6-alpine","version":"sha256:2c49857f2295e89b23b28386e57e018a86620a8fede5003900f2d138ba9c4037"}
+{"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.23.6"}
 {"name":"gha-golang-matrix","key":"golang-matrix","version":"[\"1.21\", \"1.22\", \"1.23\"]"}
 {"name":"gha-golang-release","key":"golang-latest","version":"1.23"}
 {"name":"gha-uses-commit","key":"https://github.com/actions/checkout.git:v4.2.2","version":"11bd71901bbe5b1630ceea73d27597364c9af683"}
 {"name":"gha-uses-commit","key":"https://github.com/actions/setup-go.git:v5.3.0","version":"f111f3307d8850f501ac008e886eec1fd1932a34"}
 {"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v4.6.0","version":"65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08"}
 {"name":"gha-uses-commit","key":"https://github.com/docker/build-push-action.git:v6.13.0","version":"ca877d9245402d1537745e0e356eab47c3520991"}
 {"name":"gha-uses-commit","key":"https://github.com/docker/login-action.git:v3.3.0","version":"9780b0c442fbb1117ed29e0efdff1e18412f7567"}
-{"name":"gha-uses-commit","key":"https://github.com/docker/setup-buildx-action.git:v3.8.0","version":"6524bf65af31da8d45b59e8c27de4bd072b392f5"}
-{"name":"gha-uses-commit","key":"https://github.com/sigstore/cosign-installer.git:v3.7.0","version":"dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da"}
+{"name":"gha-uses-commit","key":"https://github.com/docker/setup-buildx-action.git:v3.9.0","version":"f7ce87c1d6bead3e36075b2ce75da1f6cc28aaca"}
+{"name":"gha-uses-commit","key":"https://github.com/sigstore/cosign-installer.git:v3.8.0","version":"c56c2d3e59e4281cc41dea2217323ba5694b171e"}
 {"name":"gha-uses-commit","key":"https://github.com/softprops/action-gh-release.git:v2.2.1","version":"c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda"}
 {"name":"gha-uses-semver","key":"https://github.com/actions/checkout.git","version":"v4.2.2"}
 {"name":"gha-uses-semver","key":"https://github.com/actions/setup-go.git","version":"v5.3.0"}
 {"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v4.6.0"}
 {"name":"gha-uses-semver","key":"https://github.com/docker/build-push-action.git","version":"v6.13.0"}
 {"name":"gha-uses-semver","key":"https://github.com/docker/login-action.git","version":"v3.3.0"}
-{"name":"gha-uses-semver","key":"https://github.com/docker/setup-buildx-action.git","version":"v3.8.0"}
-{"name":"gha-uses-semver","key":"https://github.com/sigstore/cosign-installer.git","version":"v3.7.0"}
+{"name":"gha-uses-semver","key":"https://github.com/docker/setup-buildx-action.git","version":"v3.9.0"}
+{"name":"gha-uses-semver","key":"https://github.com/sigstore/cosign-installer.git","version":"v3.8.0"}
 {"name":"gha-uses-semver","key":"https://github.com/softprops/action-gh-release.git","version":"v2.2.1"}
 {"name":"go-mod-golang-release","key":"golang-oldest","version":"1.21"}
 {"name":"makefile-go-vulncheck","key":"https://go.googlesource.com/vuln.git","version":"v1.1.4"}
@@ -27,4 +27,4 @@
 {"name":"makefile-markdown-lint","key":"docker.io/davidanson/markdownlint-cli2","version":"v0.17.2"}
 {"name":"makefile-osv-scanner","key":"https://github.com/google/osv-scanner.git","version":"v1.9.2"}
 {"name":"makefile-staticcheck","key":"https://github.com/dominikh/go-tools.git","version":"v0.5.1"}
-{"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.23.5"}
+{"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.23.6"}

Dockerfile

@@ -1,6 +1,6 @@
 ARG REGISTRY=docker.io
 ARG ALPINE_VER=3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
-ARG GO_VER=1.23.5-alpine@sha256:47d337594bd9e667d35514b241569f95fb6d95727c24b19468813d596d5ae596
+ARG GO_VER=1.23.6-alpine@sha256:2c49857f2295e89b23b28386e57e018a86620a8fede5003900f2d138ba9c4037
 
 FROM ${REGISTRY}/library/golang:${GO_VER} AS build
 RUN apk add --no-cache \

Dockerfile.buildkit

@@ -1,6 +1,6 @@
 ARG REGISTRY=docker.io
 ARG ALPINE_VER=3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
-ARG GO_VER=1.23.5-alpine@sha256:47d337594bd9e667d35514b241569f95fb6d95727c24b19468813d596d5ae596
+ARG GO_VER=1.23.6-alpine@sha256:2c49857f2295e89b23b28386e57e018a86620a8fede5003900f2d138ba9c4037
 
 FROM --platform=$BUILDPLATFORM ${REGISTRY}/library/golang:${GO_VER} AS build
 RUN apk add --no-cache \