bump go version to fix CVE (#1040)

.github/workflows/ci.yml

@@ -13,7 +13,7 @@ on:
     paths-ignore: [docs/**, "**.md", "**.mdx", "**.png", "**.jpg"]
 
 env:
-  GO_VERSION: '1.22.7'
+  GO_VERSION: '1.22.12'
 
 jobs:
   detect-noop:

.github/workflows/code-lint.yml

@@ -14,7 +14,7 @@ on:
 
 env:
   # Common versions
-  GO_VERSION: '1.22.7'
+  GO_VERSION: '1.22.12'
 
 jobs:
 

.github/workflows/trivy.yml

@@ -18,7 +18,7 @@ env:
   MEMBER_AGENT_IMAGE_NAME: member-agent
   REFRESH_TOKEN_IMAGE_NAME: refresh-token
 
-  GO_VERSION: '1.22.7'
+  GO_VERSION: '1.22.12'
 
 jobs:
   export-registry:

.golangci.yml

@@ -1,6 +1,6 @@
 run:
   deadline: 10m
-  go: '1.22.7'
+  go: '1.22.12'
 
 linters:
   disable-all: true

docker/hub-agent.Dockerfile

@@ -1,5 +1,5 @@
 # Build the hubagent binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.22.7 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.22.12 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

docker/member-agent.Dockerfile

@@ -1,5 +1,5 @@
 # Build the memberagent binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.22.7 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.22.12 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

docker/refresh-token.Dockerfile

@@ -1,5 +1,5 @@
 # Build the hubagent binary
-FROM mcr.microsoft.com/oss/go/microsoft/golang:1.22.7 AS builder
+FROM mcr.microsoft.com/oss/go/microsoft/golang:1.22.12 AS builder
 
 WORKDIR /workspace
 # Copy the Go Modules manifests

go.mod

@@ -1,6 +1,6 @@
 module go.goms.io/fleet
 
-go 1.22.7
+go 1.22.12
 
 require (
 	github.com/Azure/azure-sdk-for-go/sdk/azcore v1.16.0