chore: update versions (#29)

Update all modules, go and golangci-lint.

This addresses security issues with x/net.

Author: stevenh

.github/workflows/go.yml

@@ -14,8 +14,8 @@ jobs:
   go:
     strategy:
       matrix:
-        go: [1.19]
-        golangci: [v1.55.1]
+        go: [1.22]
+        golangci: [v1.61.0]
         os: [ubuntu-latest, macos-latest, windows-latest]
     name: lint
     runs-on: ${{ matrix.os }}

.golangci.yml

@@ -1,14 +1,13 @@
 run:
   concurrency: 4
-  deadline: 5m
+  timeout: 5m
 
 linters-settings:
-  govet:
-    check-shadowing: false
+  gosec:
+    excludes:
+      - G104 # Handled by errcheck
   gocyclo:
     min-complexity: 20
-  maligned:
-    suggest-new: true
   dupl:
     threshold: 100
   goconst:
@@ -31,42 +30,39 @@ linters-settings:
 linters:
   enable-all: true
   disable:
-    - interfacer
-    - gas
-    - megacheck
-    - structcheck
     - staticcheck
     - varnamelen
     - gochecknoglobals
-    - scopelint
     - funlen
     - godox
-    - exhaustivestruct
-    - goerr113
     - wsl
     - nlreturn
     - gomnd
     - paralleltest
     - wrapcheck
     - testpackage
-    - golint
-    - maligned
     - gofumpt
     - forbidigo
     - exhaustruct
     - nonamedreturns
     - tagliatelle
     - gomoddirectives
-    - ifshort
     - ireturn
-    - nosnakecase
-    - deadcode
-    - varcheck
+    # Deprecated
+    - exportloopref
+    - execinquery
+    - copyloopvar
     # Seems to be broken and just reports all the time.
     - depguard
+    # Lots of noise
+    - mnd
+    - musttag
+    # We're ok with dynamic errors
+    - err113
 
 issues:
   exclude:
     - .*Duplicate words \(.\.\) found.*
+    - ^Error return value of `fmt\.\w+` is not checked.*
   exclude-use-default: false
   max-same-issues: 0

cmd/tracktools/cmd/gopro_laptimes.go

@@ -38,7 +38,7 @@ func (c *goproLapTimesCmd) RunE(cmd *cobra.Command, args []string) error {
 }
 
 func (c *goproLapTimesCmd) process(dec *gpmf.Decoder, file string) error {
-	f, err := os.Open(file)
+	f, err := os.Open(file) //nolint: gosec // Yes it is.
 	if err != nil {
 		return fmt.Errorf("laptimes: open %w", err)
 	}

go.mod

@@ -1,46 +1,53 @@
 module github.com/stevenh/tracktools
 
-go 1.18
+go 1.22.0
+
+toolchain go1.23.4
 
 require (
-	github.com/Eyevinn/mp4ff v0.33.2
-	github.com/flopp/go-staticmaps v0.0.0-20220221183018-c226716bec53
-	github.com/golang/geo v0.0.0-20210211234256-740aa86cb551
+	github.com/Eyevinn/mp4ff v0.47.0
+	github.com/flopp/go-staticmaps v0.0.0-20240606055734-0bdd9c1c1478
+	github.com/golang/geo v0.0.0-20230421003525-6adc56603217
 	github.com/mitchellh/go-homedir v1.1.0
 	github.com/mitchellh/mapstructure v1.5.0
-	github.com/rs/zerolog v1.29.0
-	github.com/spf13/cobra v1.6.1
+	github.com/rs/zerolog v1.33.0
+	github.com/spf13/cobra v1.8.1
 	github.com/spf13/pflag v1.0.5
-	github.com/spf13/viper v1.15.0
-	github.com/stretchr/testify v1.8.2
-	github.com/tidwall/geodesic v0.3.5
-	golang.org/x/text v0.16.0
-	gonum.org/v1/gonum v0.12.0
+	github.com/spf13/viper v1.19.0
+	github.com/stretchr/testify v1.10.0
+	github.com/tidwall/geodesic v1.52.4
+	golang.org/x/text v0.21.0
+	gonum.org/v1/gonum v0.15.1
 )
 
 require (
-	github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
-	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/flopp/go-coordsparser v0.0.0-20201115094714-8baaeb7062d5 // indirect
+	github.com/cpuguy83/go-md2man/v2 v2.0.6 // indirect
+	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
+	github.com/flopp/go-coordsparser v0.0.0-20240403152942-4891dc40d0a7 // indirect
 	github.com/fogleman/gg v1.3.0 // indirect
-	github.com/fsnotify/fsnotify v1.6.0 // indirect
+	github.com/fsnotify/fsnotify v1.8.0 // indirect
 	github.com/golang/freetype v0.0.0-20170609003504-e2365dfdc4a0 // indirect
 	github.com/hashicorp/hcl v1.0.0 // indirect
 	github.com/inconshreveable/mousetrap v1.1.0 // indirect
-	github.com/magiconair/properties v1.8.7 // indirect
-	github.com/mattn/go-colorable v0.1.13 // indirect
-	github.com/mattn/go-isatty v0.0.17 // indirect
-	github.com/pelletier/go-toml/v2 v2.0.6 // indirect
-	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/magiconair/properties v1.8.9 // indirect
+	github.com/mattn/go-colorable v0.1.14 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mazznoer/csscolorparser v0.1.5 // indirect
+	github.com/pelletier/go-toml/v2 v2.2.3 // indirect
+	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
 	github.com/russross/blackfriday/v2 v2.1.0 // indirect
-	github.com/spf13/afero v1.9.4 // indirect
-	github.com/spf13/cast v1.5.0 // indirect
-	github.com/spf13/jwalterweatherman v1.1.0 // indirect
-	github.com/subosito/gotenv v1.4.2 // indirect
-	github.com/tkrajina/gpxgo v1.2.1 // indirect
-	golang.org/x/image v0.18.0 // indirect
-	golang.org/x/net v0.23.0 // indirect
-	golang.org/x/sys v0.18.0 // indirect
+	github.com/sagikazarmark/locafero v0.7.0 // indirect
+	github.com/sagikazarmark/slog-shim v0.1.0 // indirect
+	github.com/sourcegraph/conc v0.3.0 // indirect
+	github.com/spf13/afero v1.12.0 // indirect
+	github.com/spf13/cast v1.7.1 // indirect
+	github.com/subosito/gotenv v1.6.0 // indirect
+	github.com/tkrajina/gpxgo v1.4.0 // indirect
+	go.uber.org/multierr v1.11.0 // indirect
+	golang.org/x/exp v0.0.0-20250106191152-7588d65b2ba8 // indirect
+	golang.org/x/image v0.23.0 // indirect
+	golang.org/x/net v0.34.0 // indirect
+	golang.org/x/sys v0.29.0 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )