Pe 4649 snyk issues fix (#30)

* upgraded packages - working on snyk detected issues

* updated version

* added missing packages

* updated Docker file

Author: oleh-motrunych

.github/workflows/cicd.yml

@@ -17,7 +17,7 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v1
       with:
-        go-version: 1.17
+        go-version: 1.20
       id: go
 
     - name: Check out code into the Go module directory
@@ -54,13 +54,13 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v1
       with:
-        go-version: 1.17
+        go-version: 1.20
       id: go
 
     - name: Run goreleaser
-      uses: goreleaser/goreleaser-action@v1
+      uses: goreleaser/goreleaser-action@v5
       with:
-        version: v0.131.1
+        version: latest
         args: release --rm-dist
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

Dockerfile

@@ -1,4 +1,4 @@
-FROM golang:1.17.2 as build
+FROM golang:1.20 as build
 LABEL org.opencontainers.image.source https://github.com/scribd/objinsync
 ADD . /app
 WORKDIR /app

go.mod

@@ -1,31 +1,33 @@
 module github.com/scribd/objinsync
 
-go 1.17
+go 1.20
 
 require (
-	github.com/aws/aws-sdk-go v1.41.6
-	github.com/bmatcuk/doublestar v1.2.2
-	github.com/getsentry/sentry-go v0.3.0
-	github.com/prometheus/client_golang v1.1.0
-	github.com/spf13/cobra v0.0.5
-	github.com/stretchr/testify v1.4.0
-	go.uber.org/atomic v1.4.0
-	go.uber.org/zap v1.10.0
+	github.com/aws/aws-sdk-go v1.45.28
+	github.com/bmatcuk/doublestar v1.3.4
+	github.com/getsentry/sentry-go v0.25.0
+	github.com/prometheus/client_golang v1.17.0
+	github.com/spf13/cobra v1.7.0
+	github.com/stretchr/testify v1.8.4
+	go.uber.org/atomic v1.11.0
+	go.uber.org/zap v1.26.0
 )
 
 require (
 	github.com/beorn7/perks v1.0.1 // indirect
+	github.com/cespare/xxhash/v2 v2.2.0 // indirect
 	github.com/davecgh/go-spew v1.1.1 // indirect
-	github.com/golang/protobuf v1.3.2 // indirect
-	github.com/inconshreveable/mousetrap v1.0.0 // indirect
+	github.com/inconshreveable/mousetrap v1.1.0 // indirect
 	github.com/jmespath/go-jmespath v0.4.0 // indirect
-	github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
+	github.com/matttproud/golang_protobuf_extensions/v2 v2.0.0 // indirect
 	github.com/pmezard/go-difflib v1.0.0 // indirect
-	github.com/prometheus/client_model v0.0.0-20190129233127-fd36f4220a90 // indirect
-	github.com/prometheus/common v0.6.0 // indirect
-	github.com/prometheus/procfs v0.0.3 // indirect
-	github.com/spf13/pflag v1.0.3 // indirect
-	go.uber.org/multierr v1.1.0 // indirect
-	golang.org/x/sys v0.0.0-20210423082822-04245dca01da // indirect
-	gopkg.in/yaml.v2 v2.2.8 // indirect
+	github.com/prometheus/client_model v0.5.0 // indirect
+	github.com/prometheus/common v0.45.0 // indirect
+	github.com/prometheus/procfs v0.12.0 // indirect
+	github.com/spf13/pflag v1.0.5 // indirect
+	go.uber.org/multierr v1.11.0 // indirect
+	golang.org/x/sys v0.13.0 // indirect
+	golang.org/x/text v0.13.0 // indirect
+	google.golang.org/protobuf v1.31.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )