Bump Go version to 1.21.9 to address HTTP CONTINUE vuln

Author: ARolek

.github/actions/tegola-setup-env/action.yml

@@ -32,6 +32,7 @@ runs:
       uses: actions/setup-go@v5
       with:
         go-version-file: 'go.mod'
+        check-latest: true
       if: ${{ inputs.go == 'true' }}
 
     - name: Set tegola version

.github/workflows/on_pr_push.yml

@@ -36,6 +36,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version-file: 'go.mod'
+          check-latest: true
 
       - name: Env Debug
         run: |
@@ -118,6 +119,7 @@ jobs:
       uses: actions/setup-go@v5
       with:
         go-version-file: 'go.mod'
+        check-latest: true
 
     - name: Install and run go vulncheck
       run: |

.github/workflows/on_release_publish.yml

@@ -57,6 +57,7 @@ jobs:
         uses: actions/setup-go@v5
         with:
           go-version-file: 'go.mod'
+          check-latest: true
 
       - name: Build embedded UI
         run: |

Dockerfile

@@ -27,7 +27,7 @@
 #  $ docker run -v /path/to/docker-config:/opt/tegola_config -p 8080 tegola serve
 
 # Intermediary container for building
-FROM golang:1.21.8-alpine3.18 AS build
+FROM golang:1.21.9-alpine3.18 AS build
 
 ARG BUILDPKG="github.com/go-spatial/tegola/internal/build"
 ARG VER="Version Not Set"