Updated Go to 1.22.7 to fix vulnerabilities

.circleci/config.yml

@@ -136,7 +136,7 @@ jobs:
       # The goreleaser image tag determins the version of Go.
       # Manually check goreleaser images for their version of Go.
       # Ref: https://hub.docker.com/r/goreleaser/goreleaser/tags
-      - image: goreleaser/goreleaser:v1.20.0
+      - image: goreleaser/goreleaser:v2.3.2
     steps:
       - checkout
       - setup_remote_docker

.goreleaser.yml.envsubst

@@ -1,3 +1,4 @@
+version: 2
 checksum:
   name_template: 'checksums.txt'
 changelog:
@@ -51,11 +52,12 @@ brews:
   - name: polaris
     # This is replaced using `envsubst`, depending on the git branch.
     skip_upload: ${skip_release}
-    tap:
+    repository:
       owner: FairwindsOps
       name: homebrew-tap
-    folder: Formula
+    directory: Formula
     description: Open Source Best Practices for Kubernetes
+    url_template: "https://github.com/FairwindsOps/polaris/releases/download/{{ .Tag }}/{{ .ArtifactName }}"
     test: |
       system "#{bin}/polaris version"
 dockers:

go.mod

@@ -1,6 +1,6 @@
 module github.com/fairwindsops/polaris
 
-go 1.22.3
+go 1.22.7
 
 require (
 	github.com/AlecAivazis/survey/v2 v2.3.7

scripts/goreleaser.sh

@@ -55,7 +55,7 @@ echo "${this_script} using git tag ${GORELEASER_CURRENT_TAG}"
 # Only substitute specific variables, as goreleaser uses shell variable syntax
 # for its `signs` section `signature` and `artifact` variables.
 cat .goreleaser.yml.envsubst |envsubst '${skip_release} ${skip_feature_docker_tags} ${feature_docker_tag}' >.goreleaser.yml
-goreleaser $@
+goreleaser --skip=sign $@
 if [ $? -eq 0 ] ; then
   echo "${this_script} removing the temporary .goreleaser.yml since goreleaser was successful"
   rm .goreleaser.yml # Keep git clean for additional goreleaser runs