For GitHub first party actions (actions from the github.com/actions
organisation) we just use a major version tag. For actions from any
other source we pin to an exact commit SHA1 (and put the version in
a comment)
* chore: Update dependency versions
* Downgrade crypto to fix bazel CI
* Switch to Go 1.23.7 and update dependencies
Signed-off-by: Andrii Korotkov <andrii.korotkov@verkada.com>
Motivation: make darwin_arm64 artifact available as part of the release
The *Installation instructions* already refers to Go v1.17 and above, and
the README.md states:
*We recommend always using the newest stable release of Go.*
Please note, that is not yet a working change set. It appears that a
go mod tidy
is needed to make the build step work.
