From 65fa5fad63713e0d9cb93fd4eee07e2b7c5d5222 Mon Sep 17 00:00:00 2001
From: SuperQ <superq@gmail.com>
Date: Fri, 17 Jan 2025 10:00:28 +0100
Subject: [PATCH] Update build

* Update Go minimum to 1.21 to support new features.
* Update test matrix to latest 3 releases.
* Bump GitHub actions.
* Pin GitHub actions to commit hashes for supply chain security.
* Enable dependabot for GitHub actions.

Signed-off-by: SuperQ <superq@gmail.com>
---
 .github/dependabot.yml                | 4 ++++
 .github/workflows/static-analysis.yml | 9 ++++++---
 .github/workflows/test.yml            | 9 ++++++---
 go.mod                                | 2 +-
 4 files changed, 17 insertions(+), 7 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 202ae23..c0b195d 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,3 +4,7 @@ updates:
     directory: "/"
     schedule:
       interval: "monthly"
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "monthly"
diff --git a/.github/workflows/static-analysis.yml b/.github/workflows/static-analysis.yml
index 6b08d6a..b70efdb 100644
--- a/.github/workflows/static-analysis.yml
+++ b/.github/workflows/static-analysis.yml
@@ -12,18 +12,21 @@ jobs:
   build:
     strategy:
       matrix:
-        go-version: ["1.19","1.20"]
+        go-version:
+          - "1.21.x"
+          - "1.22.x"
+          - "1.23.x"
     runs-on: ubuntu-latest
 
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
         with:
           go-version: ${{ matrix.go-version }}
         id: go
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Install staticcheck
         run: go install honnef.co/go/tools/cmd/staticcheck@latest
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index 35baf4d..57d5324 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -13,19 +13,22 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        go-version: ["1.19","1.20"]
+        go-version:
+          - "1.21.x"
+          - "1.22.x"
+          - "1.23.x"
         os: [ubuntu-latest, macos-latest]
     runs-on: ${{ matrix.os }}
 
     steps:
       - name: Set up Go
-        uses: actions/setup-go@v3
+        uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v5.2.0
         with:
           go-version: ${{ matrix.go-version }}
         id: go
 
       - name: Check out code into the Go module directory
-        uses: actions/checkout@v3
+        uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
       - name: Run tests
         run: go test -race ./...
diff --git a/go.mod b/go.mod
index 625b845..ece798b 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/mdlayher/ethtool
 
-go 1.19
+go 1.21.0
 
 require (
 	github.com/google/go-cmp v0.6.0