Upgrade some libs and golang to 1.25.2 / Added Windows ARM64 build (#81)

* Updated go to 1.25.2 and some libraries

* Added Win/ARM64 build

* Use setup-qemu-action

* Removing dependency on QEMU

* Adding permissions from upstream templates

* Re-enable vsc timestamping

* Made CGO_ENABLED in DistTask.yml configurable.

Author: cmaglie

.github/workflows/check-go-dependencies-task.yml

@@ -3,7 +3,7 @@ name: Check Go Dependencies
 
 env:
   # See: https://github.com/actions/setup-go/tree/main#supported-version-syntax
-  GO_VERSION: "1.23"
+  GO_VERSION: "1.25.2"
 
 # See: https://docs.github.com/actions/using-workflows/events-that-trigger-workflows
 on:

.github/workflows/check-go-task.yml

@@ -3,7 +3,7 @@ name: Check Go
 
 env:
   # See: https://github.com/actions/setup-go/tree/main#supported-version-syntax
-  GO_VERSION: "1.23"
+  GO_VERSION: "1.25.2"
 
 # See: https://docs.github.com/en/actions/reference/events-that-trigger-workflows
 on:

.github/workflows/publish-go-tester-task.yml

@@ -34,6 +34,7 @@ jobs:
     runs-on: ubuntu-latest
     outputs:
       result: ${{ steps.determination.outputs.result }}
+    permissions: {}
     steps:
       - name: Determine if the rest of the workflow should run
         id: determination
@@ -59,6 +60,7 @@ jobs:
     needs: run-determination
     if: needs.run-determination.outputs.result == 'true'
     runs-on: ubuntu-latest
+    permissions: {}
     outputs:
       prefix: ${{ steps.calculation.outputs.prefix }}
     steps:
@@ -76,38 +78,53 @@ jobs:
   build:
     needs: package-name-prefix
     name: Build ${{ matrix.os.artifact-name }}
-    runs-on: ubuntu-latest
+    runs-on: ${{ matrix.os.runner }}
+    permissions:
+      contents: read
 
     strategy:
       matrix:
         os:
           - task: Windows_32bit
             path: "*Windows_32bit.zip"
             artifact-name: Windows_X86-32
+            runner: ubuntu-latest
           - task: Windows_64bit
             path: "*Windows_64bit.zip"
             artifact-name: Windows_X86-64
+            runner: ubuntu-latest
+          - task: Windows_ARM64
+            path: "*Windows_ARM64.zip"
+            artifact-name: Windows_ARM64
+            runner: ubuntu-24.04-arm
           - task: Linux_32bit
             path: "*Linux_32bit.tar.gz"
             artifact-name: Linux_X86-32
+            runner: ubuntu-latest
           - task: Linux_64bit
             path: "*Linux_64bit.tar.gz"
             artifact-name: Linux_X86-64
+            runner: ubuntu-latest
           - task: Linux_ARMv6
             path: "*Linux_ARMv6.tar.gz"
             artifact-name: Linux_ARMv6
+            runner: ubuntu-latest
           - task: Linux_ARMv7
             path: "*Linux_ARMv7.tar.gz"
             artifact-name: Linux_ARMv7
+            runner: ubuntu-latest
           - task: Linux_ARM64
             path: "*Linux_ARM64.tar.gz"
             artifact-name: Linux_ARM64
+            runner: ubuntu-24.04-arm
           - task: macOS_64bit
             path: "*macOS_64bit.tar.gz"
             artifact-name: macOS_64
+            runner: ubuntu-latest
           - task: macOS_ARM64
             path: "*macOS_ARM64.tar.gz"
             artifact-name: macOS_ARM64
+            runner: ubuntu-24.04-arm
 
     steps:
       - name: Checkout repository
@@ -137,6 +154,8 @@ jobs:
       - build
       - package-name-prefix
     runs-on: ubuntu-latest
+    permissions:
+      contents: read
 
     steps:
       - name: Download build artifacts

.github/workflows/release-go-task.yml

@@ -18,29 +18,43 @@ on:
 
 jobs:
   create-release-artifacts:
-    runs-on: ubuntu-latest
+    runs-on: ${{ matrix.os.runner }}
+    permissions:
+      contents: read
 
     strategy:
       matrix:
         os:
           - task: Windows_32bit
             artifact-suffix: Windows_32bit
+            runner: ubuntu-latest
           - task: Windows_64bit
             artifact-suffix: Windows_64bit
+            runner: ubuntu-latest
+          - task: Windows_ARM64
+            artifact-suffix: Windows_ARM64
+            runner: ubuntu-24.04-arm
           - task: Linux_32bit
             artifact-suffix: Linux_32bit
+            runner: ubuntu-latest
           - task: Linux_64bit
             artifact-suffix: Linux_64bit
+            runner: ubuntu-latest
           - task: Linux_ARMv6
             artifact-suffix: Linux_ARMv6
+            runner: ubuntu-latest
           - task: Linux_ARMv7
             artifact-suffix: Linux_ARMv7
+            runner: ubuntu-latest
           - task: Linux_ARM64
             artifact-suffix: Linux_ARM64
+            runner: ubuntu-24.04-arm
           - task: macOS_64bit
             artifact-suffix: macOS_64bit
+            runner: ubuntu-latest
           - task: macOS_ARM64
             artifact-suffix: macOS_ARM64
+            runner: ubuntu-24.04-arm
 
     steps:
       - name: Checkout repository