Merge pull request #34 from CycloneDX/pin-cdx-gomod

Bump CI actions go versions

Author: markstur

.github/workflows/go.yml

@@ -16,7 +16,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v3
       with:
-        go-version: 1.18
+        go-version: 1.21
 
     - name: Build
       run: go build -v ./...

.github/workflows/release.yml

@@ -42,9 +42,9 @@ jobs:
 
     # Generate an SBOM
     - name: Set up Go
-      uses: actions/setup-go@v3
+      uses: actions/setup-go@v5
       with:
-        go-version: 1.18
+        go-version: 1.21
     - name: Install SBOM generator (latest)
       run: go install github.com/CycloneDX/cyclonedx-gomod/cmd/cyclonedx-gomod@v1.7.0
     - name: Generate SBOM (from `go.mod`)