clean up ci, use go 1.24, apply best practices for ci and general clean up

Signed-off-by: Carlos Panato <ctadeu@gmail.com>

Author: cpanato

.github/workflows/ci.yml

@@ -10,10 +10,15 @@ on:
       - .gitignore
   merge_group:
 
+permissions: {}
+
 jobs:
   lint:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+
     env:
       GOPATH: /home/runner/go
 
@@ -22,20 +27,21 @@ jobs:
       uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with:
         submodules: recursive
+        persist-credentials: false
 
     - name: Setup Go
       uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
       with:
-        go-version: '1.21'
+        go-version-file: './.go-version'
         check-latest: true
 
     - name: Format check
       run: make fmt
 
     - name: golangci-lint
-      uses: golangci/golangci-lint-action@aaa42aa0628b4ae2578232a66b541047968fac86 # v6.1.0
+      uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
       with:
-        version: v1.59
+        version: v2.2
         args: --build-tags testonly
 
     - name: Check generated code

.github/workflows/codeql.yml

@@ -8,6 +8,9 @@ on:
   schedule:
     - cron: '21 6 * * 6'
 
+
+permissions: {}
+
 jobs:
   analyze:
     name: Analyze (${{ matrix.language }})

.github/workflows/coverage.yml

@@ -13,15 +13,21 @@ on:
       - main
   merge_group:
 
+
+permissions: {}
+
 jobs:
   coverage:
     runs-on: ubuntu-latest
 
+    permissions:
+      contents: read
+
     strategy:
       matrix:
         go-version:
-          - '1.21'
-          - '1.22'
+          - '1.23'
+          - '1.24'
 
     env:
       GOPATH: /home/runner/go
@@ -31,6 +37,7 @@ jobs:
       uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7
       with:
         submodules: recursive
+        persist-credentials: false
 
     - name: Setup Go
       uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2

.github/workflows/dco_merge_group.yaml

@@ -2,9 +2,11 @@ name: DCO
 on:
   merge_group:
 
+permissions: {}
+
 jobs:
   DCO:
     runs-on: ubuntu-latest
     if: ${{ github.actor != 'dependabot[bot]' }}
     steps:
-      - run: echo "dummy DCO workflow (it won't run any check actually) to trigger by merge_group in order to enable merge queue"
+      - run: echo "dummy DCO workflow (it won't run any check actually) to trigger by merge_group in order to enable merge queue"

.go-version

@@ -0,0 +1 @@
+1.24.4

.golangci.yml

@@ -0,0 +1,49 @@
+version: "2"
+run:
+  issues-exit-code: 1
+linters:
+  enable:
+    - asciicheck
+    - errorlint
+    - gocritic
+    - gosec
+    - importas
+    - misspell
+    - prealloc
+    - revive
+    - staticcheck
+    - tparallel
+    - unconvert
+    - unparam
+    - whitespace
+
+  exclusions:
+    generated: lax
+    presets:
+      - comments
+      - common-false-positives
+      - legacy
+      - std-error-handling
+    rules:
+      - linters:
+          - errcheck
+          - gosec
+        path: _test\.go
+    paths:
+      - third_party$
+      - builtin$
+      - examples$
+issues:
+  max-issues-per-linter: 0
+  max-same-issues: 0
+  uniq-by-line: false
+formatters:
+  enable:
+    - gofmt
+    - goimports
+  exclusions:
+    generated: lax
+    paths:
+      - third_party$
+      - builtin$
+      - examples$

.goreleaser.yaml

@@ -1,24 +1,23 @@
+version: 2
+
 before:
   hooks:
     - go mod tidy
+
 builds:
   - env:
       - CGO_ENABLED=0
     goos:
       - linux
       - windows
       - darwin
-archives:
-  - replacements:
-      darwin: Darwin
-      linux: Linux
-      windows: Windows
-      386: i386
-      amd64: x86_64
+
 checksum:
   name_template: 'checksums.txt'
+
 snapshot:
-  name_template: "{{ incpatch .Version }}-next"
+  version_template: "{{ incpatch .Version }}-next"
+
 changelog:
   sort: asc
   filters:

DEVELOPMENT.md

@@ -17,7 +17,7 @@ You must install these tools:
 1. [`git`](https://help.github.com/articles/set-up-git/): For source control
 
 1. [`go`](https://golang.org/doc/install): The language this SDK is built in.
-    > **Note** Golang [version v1.18](https://golang.org/dl/) or higher is required.
+    > **Note** Golang [version v1.23](https://golang.org/dl/) or higher is required.
 
 1. [`make`](https://www.gnu.org/software/make/): not stricly required but handy to run
    tests with a single command.
@@ -85,4 +85,3 @@ To run all targets, before creating a commit:
 ```shell
 make all
 ```
-