update go version and modules

.github/pull_request_template.md

@@ -0,0 +1,9 @@
+## Changes proposed in this pull request:
+
+-
+-
+-
+
+## security considerations
+
+[Note the any security considerations here, or make note of why there are none]

.github/workflows/security-considerations.yml

@@ -0,0 +1,12 @@
+name: Security Considerations
+
+on:
+  pull_request:
+    types: [opened, edited, reopened]
+    branches: [main, master, develop]
+
+jobs:
+  security-considerations:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: cloud-gov/security-considerations-action@main

cmd/task/main.go

@@ -4,9 +4,9 @@ import (
 	"encoding/json"
 	"os"
 
+	task "github.com/concourse/oci-build-task"
 	"github.com/sirupsen/logrus"
 	"github.com/u-root/u-root/pkg/termios"
-	task "github.com/concourse/oci-build-task"
 )
 
 func main() {

go.mod

@@ -1,19 +1,45 @@
 module github.com/concourse/oci-build-task
 
-go 1.12
+go 1.22
 
 require (
-	github.com/BurntSushi/toml v0.4.1
-	github.com/VividCortex/ewma v1.1.1 // indirect
+	github.com/BurntSushi/toml v1.3.2
 	github.com/concourse/go-archive v1.0.1
-	github.com/fatih/color v1.13.0
-	github.com/google/go-containerregistry v0.9.0
+	github.com/fatih/color v1.16.0
+	github.com/google/go-containerregistry v0.19.1
 	github.com/julienschmidt/httprouter v1.3.0
 	github.com/pkg/errors v0.9.1
-	github.com/sirupsen/logrus v1.8.1
-	github.com/stretchr/testify v1.7.0
+	github.com/sirupsen/logrus v1.9.3
+	github.com/stretchr/testify v1.9.0
 	github.com/u-root/u-root v7.0.0+incompatible
 	github.com/vbauerster/mpb v3.4.0+incompatible
 	github.com/vrischmann/envconfig v1.3.0
-	golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f // indirect
+)
+
+require (
+	github.com/VividCortex/ewma v1.2.0 // indirect
+	github.com/containerd/stargz-snapshotter/estargz v0.15.1 // indirect
+	github.com/davecgh/go-spew v1.1.1 // indirect
+	github.com/docker/cli v26.0.1+incompatible // indirect
+	github.com/docker/distribution v2.8.3+incompatible // indirect
+	github.com/docker/docker v26.0.1+incompatible // indirect
+	github.com/docker/docker-credential-helpers v0.8.1 // indirect
+	github.com/google/go-cmp v0.6.0 // indirect
+	github.com/klauspost/compress v1.17.8 // indirect
+	github.com/kr/pretty v0.3.1 // indirect
+	github.com/mattn/go-colorable v0.1.13 // indirect
+	github.com/mattn/go-isatty v0.0.20 // indirect
+	github.com/mitchellh/go-homedir v1.1.0 // indirect
+	github.com/onsi/ginkgo v1.16.5 // indirect
+	github.com/onsi/gomega v1.32.0 // indirect
+	github.com/opencontainers/go-digest v1.0.0 // indirect
+	github.com/opencontainers/image-spec v1.1.0 // indirect
+	github.com/pmezard/go-difflib v1.0.0 // indirect
+	github.com/vbatts/tar-split v0.11.5 // indirect
+	golang.org/x/crypto v0.22.0 // indirect
+	golang.org/x/mod v0.14.0 // indirect
+	golang.org/x/sync v0.7.0 // indirect
+	golang.org/x/sys v0.19.0 // indirect
+	golang.org/x/term v0.19.0 // indirect
+	gopkg.in/yaml.v3 v3.0.1 // indirect
 )