Bump to go1.24.1

Signed-off-by: Alvaro Neira Ayuso <[email protected]>

Author: alvneiayu

.github/workflows/ci.yml

@@ -38,8 +38,8 @@ jobs:
       matrix:
         go: ${{ fromJSON(needs.load-versions.outputs.go_version_list) }}
         os: [ubuntu-latest]
-        golangci-lint: ["1.62.2"]
-        gosec: ["2.19.0"]
+        golangci-lint: ["1.64.8"]
+        gosec: ["2.22.2"]
     steps:
     - name: Set up Go 1.x
       uses: actions/[email protected]

.golangci.yaml

@@ -215,7 +215,7 @@ linters:
     #- errorlint # finds code that will cause problems with the error wrapping scheme introduced in Go 1.13
     #- execinquery # checks query string in Query function which reads your Go src files and warning it finds
     - exhaustive # checks exhaustiveness of enum switch statements
-    - exportloopref # checks for pointers to enclosing loop variables
+    #- exportloopref # checks for pointers to enclosing loop variables
     #- forbidigo # forbids identifiers
     #- funlen # tool for detection of long functions
     #- gochecknoinits # checks that no init functions are present in Go code

go.mod

@@ -1,6 +1,6 @@
 module github.com/bitnami-labs/sealed-secrets
 
-go 1.23.7
+go 1.24.1
 
 require (
 	github.com/Masterminds/sprig/v3 v3.3.0

pkg/crypto/crypto.go

@@ -59,6 +59,7 @@ func HybridEncrypt(rnd io.Reader, pubKey *rsa.PublicKey, plaintext, label []byte
 	// First 2 bytes are RSA ciphertext length, so we can separate
 	// all the pieces later.
 	ciphertext := make([]byte, 2)
+	// #nosec G115
 	binary.BigEndian.PutUint16(ciphertext, uint16(len(rsaCiphertext)))
 	ciphertext = append(ciphertext, rsaCiphertext...)
 

pkg/crypto/keys_test.go

@@ -17,7 +17,7 @@ func testRand() io.Reader {
 func TestSignKey(t *testing.T) {
 	rand := testRand()
 
-	key, err := rsa.GenerateKey(rand, 512)
+	key, err := rsa.GenerateKey(rand, 2048)
 	if err != nil {
 		t.Fatalf("Failed to generate test key: %v", err)
 	}

versions.env

@@ -1,2 +1,2 @@
-GO_VERSION=1.23.7
+GO_VERSION=1.24.1
 GO_VERSION_LIST="[\"$GO_VERSION\"]"