fix: resolve cves and upgrade go to 1.25

.github/workflows/e2e_test.yml

@@ -55,10 +55,13 @@ jobs:
       - name: Cleanup disk
         run: sudo rm -rf /usr/local/.ghcup
 
-      - name: Set up Go 1.24
-        uses: actions/setup-go@v3
+      - name: Checkout
+        uses: actions/checkout@v3
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version-file: go.work
         id: go
 
       - name: Set up Git token
@@ -69,9 +72,6 @@ jobs:
         run: |
           go install github.com/onsi/ginkgo/ginkgo@latest
 
-      - name: Checkout
-        uses: actions/checkout@v3
-
       # TODO the k8s version should be configurable
       - name: Setup K8s cluster
         run: |

.github/workflows/golangci-lint.yml

@@ -35,20 +35,20 @@ jobs:
       ACCESS_TOKEN: ${{ secrets.SNBOT_GITHUB_TOKEN }}
       GOPRIVATE: github.com/streamnative
     steps:
-      - name: Set up git token
-        run: |
-          git config --global url."https://${ACCESS_TOKEN}:@github.com/".insteadOf "https://github.com/"
+      - uses: actions/checkout@v3
 
-      - uses: actions/setup-go@v3
+      - uses: actions/setup-go@v5
         with:
-          go-version: 1.24
+          go-version-file: go.work
 
-      - uses: actions/checkout@v3
+      - name: Set up git token
+        run: |
+          git config --global url."https://${ACCESS_TOKEN}:@github.com/".insteadOf "https://github.com/"
       - name: golangci-lint
-        uses: golangci/golangci-lint-action@v6
+        uses: golangci/golangci-lint-action@v7
         with:
           # Optional: version of golangci-lint to use in form of v1.2 or v1.2.3 or `latest` to use the latest version
-          version: v1.64
+          version: v2.11.4
           args: --timeout=5m
 
           # Optional: working directory, useful for monorepos

.github/workflows/release-operator.yml

@@ -38,19 +38,19 @@ jobs:
       default_channel: ${{ steps.redhat.outputs.default_channel }}
 
     steps:
-      - name: Set up Go 1.24
-        uses: actions/setup-go@v3
+      - name: Check out code into the Go module directory
+        uses: actions/checkout@v3
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version-file: go.work
         id: go
 
       - name: Set up Git token
         run: |
           git config --global url."https://${ACCESS_TOKEN}:@github.com/".insteadOf "https://github.com/"
 
-      - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
-
       - name: Setup operator-sdk
         run: |
           wget https://github.com/operator-framework/operator-sdk/releases/download/v1.31.0/operator-sdk_linux_amd64 -O operator-sdk

.github/workflows/style.yml

@@ -32,19 +32,19 @@ jobs:
       ACCESS_TOKEN: ${{ secrets.SNBOT_GITHUB_TOKEN }}
       GOPRIVATE: github.com/streamnative
     steps:
-      - name: Set up Go 1.24
-        uses: actions/setup-go@v3
+      - name: Check out code into the Go module directory
+        uses: actions/checkout@v3
+
+      - name: Set up Go
+        uses: actions/setup-go@v5
         with:
-          go-version: "1.24"
+          go-version-file: go.work
         id: go
 
       - name: Set up git token
         run: |
           git config --global url."https://${ACCESS_TOKEN}:@github.com/".insteadOf "https://github.com/"
 
-      - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
-
       - name: Check style
         run: |
           ./scripts/verify_gofmt.sh ./...