Update to recent versions in GHA

.github/workflows/ci.yml

@@ -15,9 +15,9 @@ jobs:
     steps:
 
     - name: Set up Go
-      uses: actions/setup-go@v3
+      uses: actions/setup-go@v5
       with:
-        go-version: 1.19
+        go-version: 1.24
       id: go
 
     - name: Setup Go binary path
@@ -27,7 +27,7 @@ jobs:
         echo "${{ github.workspace }}/bin" >> $GITHUB_PATH
 
     - name: Check out code
-      uses: actions/checkout@v3
+      uses: actions/checkout@v4
       with:
         path: src/github.com/containerd/release-tool
         fetch-depth: 25
@@ -38,9 +38,9 @@ jobs:
         working-directory: src/github.com/containerd/release-tool
 
     - name: Linter
-      uses: golangci/golangci-lint-action@v3
+      uses: golangci/golangci-lint-action@v6
       with:
-        version: v1.50.1
+        version: v1.64.2
         working-directory: src/github.com/containerd/release-tool
 
     - name: Unit Test

.golangci.yml

@@ -1,18 +1,42 @@
 linters:
   enable:
-    - staticcheck
-    - unconvert
+    - copyloopvar # Checks for loop variable copies in Go 1.22+
     - gofmt
     - goimports
-    - revive
+    - gosec
     - ineffassign
-    - vet
-    - unused
     - misspell
-    - exportloopref
-    - tenv
+    - nolintlint
+    - revive
+    - staticcheck
+    - unconvert
+    - unused
+    - govet
+    - dupword # Checks for duplicate words in the source code
   disable:
     - errcheck
 
+issues:
+  include:
+    - EXC0002
+  max-issues-per-linter: 0
+  max-same-issues: 0
+
+linters-settings:
+  gosec:
+    # The following issues surfaced when `gosec` linter
+    # was enabled. They are temporarily excluded to unblock
+    # the existing workflow, but still to be addressed by
+    # future works.
+    excludes:
+      - G204
+      - G305
+      - G306
+      - G402
+      - G404
+      - G115
+  nolintlint:
+    allow-unused: true
+
 run:
-  deadline: 2m
+  timeout: 2m

go.mod

@@ -1,6 +1,6 @@
 module github.com/containerd/release-tool
 
-go 1.19
+go 1.23
 
 require (
 	github.com/pelletier/go-toml/v2 v2.0.5

util.go

@@ -782,7 +782,7 @@ func resolveGitURL(name string, cache Cache) (string, error) {
 		return string(b), nil
 	}
 
-	resp, err := http.Get(u)
+	resp, err := http.Get(u) //nolint:gosec
 	if err != nil {
 		return "", err
 	}