ci: enable govulncheck

.github/workflows/codeql.yml

@@ -18,7 +18,7 @@ on:
     - cron: '24 20 * * 4'
 
 env:
-  GO_VERSION: '1.21.1'
+  GO_VERSION: '1.21.5'
 
 jobs:
   analyze:

.github/workflows/govulncheck.yml

@@ -0,0 +1,21 @@
+name: govulncheck
+# Runs https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck to proactively
+# check for vulnerabilities.
+#
+# Run `make vulncheck` from the root of the repo to run this workflow locally.
+on:
+  pull_request:
+
+env:
+  GO_VERSION: '1.21.5'
+
+jobs:
+  govulncheck:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/setup-go@v5
+        with:
+          go-version: ${{ env.GO_VERSION }}
+      - uses: actions/checkout@v4
+      - name: make govulncheck
+        run: make govulncheck

.github/workflows/lint.yml

@@ -3,7 +3,7 @@ on:
   workflow_call:
 
 env:
-  GO_VERSION: '1.21.1'
+  GO_VERSION: '1.21.5'
 
 jobs:
   golangci-lint:

.github/workflows/nightly.yml

@@ -6,7 +6,7 @@ on:
   workflow_dispatch:
 
 env:
-  GO_VERSION: '1.21.1'
+  GO_VERSION: '1.21.5'
 
 jobs:
   test-e2e:

.github/workflows/test.yml

@@ -3,7 +3,7 @@ on:
   workflow_call:
 
 env:
-  GO_VERSION: '1.21.1'
+  GO_VERSION: '1.21.5'
 
 jobs:
   test-short:

Makefile

@@ -8,7 +8,7 @@ DOCKER_PROTO_BUILDER := docker run -v $(shell pwd):/workspace --workdir /workspa
 PROJECTNAME=$(shell basename "$(PWD)")
 HTTPS_GIT := https://github.com/celestiaorg/celestia-app.git
 PACKAGE_NAME          := github.com/celestiaorg/celestia-app
-GOLANG_CROSS_VERSION  ?= v1.21.4
+GOLANG_CROSS_VERSION  ?= v1.21.5
 
 # process linker flags
 ldflags = -X github.com/cosmos/cosmos-sdk/version.Name=celestia-app \
@@ -190,3 +190,8 @@ prebuilt-binary:
 		ghcr.io/goreleaser/goreleaser-cross:${GOLANG_CROSS_VERSION} \
 		release --clean
 .PHONY: prebuilt-binary
+
+## govulncheck: Check for vulnerabilities in dependencies.
+govulncheck:
+	@go run golang.org/x/vuln/cmd/govulncheck@latest ./...
+.PHONY: govulncheck

README.md

@@ -35,7 +35,7 @@ node            |  |                               |  |
 
 ### Source
 
-1. [Install Go](https://go.dev/doc/install) 1.21.1
+1. [Install Go](https://go.dev/doc/install) 1.21.5
 1. Clone this repo
 1. Install the celestia-app CLI
 

go.mod

@@ -1,6 +1,6 @@
 module github.com/celestiaorg/celestia-app
 
-go 1.21.1
+go 1.21.5
 
 require (
 	cosmossdk.io/errors v1.0.0-beta.7

go.work

@@ -1,4 +1,4 @@
-go 1.21.1
+go 1.21.5
 
 use (
 	.

test/testground/Dockerfile

@@ -1,6 +1,6 @@
 # BUILD_BASE_IMAGE is the base image to use for the build. It contains a rolling
 # accumulation of Go build/package caches.
-ARG BUILD_BASE_IMAGE=docker.io/golang:1.21.0-alpine3.18
+ARG BUILD_BASE_IMAGE=docker.io/golang:1.21.5-alpine3.18
 # This Dockerfile performs a multi-stage build and RUNTIME_IMAGE is the image
 # onto which to copy the resulting binary.
 #
@@ -37,7 +37,7 @@ ARG GO_PROXY=https://proxy.golang.org
 # BUILD_TAGS is either nothing, or when expanded, it expands to "-tags <comma-separated build tags>"
 ARG BUILD_TAGS
 
-# TESTPLAN_EXEC_PKG is the executable package within this test plan we want to build. 
+# TESTPLAN_EXEC_PKG is the executable package within this test plan we want to build.
 ENV TESTPLAN_EXEC_PKG ${TESTPLAN_EXEC_PKG}
 
 # We explicitly set GOCACHE under the /go directory for more tidiness.
@@ -51,18 +51,18 @@ RUN apk add gcompat
 
 # Download deps.
 RUN echo "Using go proxy: ${GO_PROXY}" \
-    && cd ${PLAN_DIR} \
-    && go env -w GOPROXY="${GO_PROXY}" \
-    && go mod download
+  && cd ${PLAN_DIR} \
+  && go env -w GOPROXY="${GO_PROXY}" \
+  && go mod download
 
 
 # Now copy the rest of the source and run the build.
 COPY . /
 
 
 RUN cd ${PLAN_DIR} \
-    && go env -w GOPROXY="${GO_PROXY}" \
-    && CGO_ENABLED=${CgoEnabled} GOOS=linux GOARCH=amd64 go build -o ${PLAN_DIR}/testplan.bin ${BUILD_TAGS} ${TESTPLAN_EXEC_PKG}
+  && go env -w GOPROXY="${GO_PROXY}" \
+  && CGO_ENABLED=${CgoEnabled} GOOS=linux GOARCH=amd64 go build -o ${PLAN_DIR}/testplan.bin ${BUILD_TAGS} ${TESTPLAN_EXEC_PKG}
 
 # Store module dependencies
 RUN cd ${PLAN_DIR} \

test/testground/compositions/standard/plan.toml

@@ -45,7 +45,7 @@ cpu = "6"
 count = 40
 percentage = 0.0
 [groups.build_config]
-build_base_image = "golang:1.21.3"
+build_base_image = "golang:1.21.5"
 enable_go_build_cache = true
 enabled = true
 go_version = "1.21"

test/testground/go.mod

@@ -1,6 +1,6 @@
 module github.com/celestiaorg/celestia-app/test/testground
 
-go 1.21.1
+go 1.21.5
 
 require (
 	github.com/celestiaorg/celestia-app v1.0.0-rc0.0.20231219172024-f57f5c104ea0