pin gh action go versions to 1.23

Author: dsessler7

.github/workflows/codeql-analysis.yaml

@@ -23,7 +23,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-go@v6
-        with: { go-version: stable }
+        with: { go-version: 1.23 }
 
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4

.github/workflows/lint.yaml

@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-go@v6
-        with: { go-version: stable }
+        with: { go-version: 1.23 }
 
       - uses: golangci/golangci-lint-action@v9
         with:

.github/workflows/test.yaml

@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-go@v6
-        with: { go-version: stable }
+        with: { go-version: 1.23 }
 
       - name: Ensure go.mod is tidy
         run: go mod tidy --diff
@@ -32,7 +32,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-go@v6
-        with: { go-version: stable }
+        with: { go-version: 1.23 }
 
       - run: go mod download
       - run: ENVTEST_K8S_VERSION="${KUBERNETES#default}" make check-envtest
@@ -59,7 +59,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-go@v6
-        with: { go-version: stable }
+        with: { go-version: 1.23 }
 
       - name: Start k3s
         uses: ./.github/actions/k3d
@@ -93,7 +93,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-go@v6
-        with: { go-version: stable }
+        with: { go-version: 1.23 }
 
       - name: Start k3s
         uses: ./.github/actions/k3d
@@ -167,7 +167,7 @@ jobs:
     steps:
       - uses: actions/checkout@v5
       - uses: actions/setup-go@v6
-        with: { go-version: stable }
+        with: { go-version: 1.23 }
       - uses: actions/download-artifact@v6
         with: { path: download }
 

.github/workflows/trivy.yaml

@@ -47,7 +47,7 @@ jobs:
 
       # Trivy needs a populated Go module cache to detect Go module licenses.
       - uses: actions/setup-go@v6
-        with: { go-version: stable }
+        with: { go-version: 1.23 }
       - run: go mod download
 
       # Report success only when detected licenses are listed in [.trivyignore.yaml].