ci: fix go version to that defined in go.mod (#438)

Our version of Go we reference in our .github/** doesn't match that in go.mod.
To fix this, I've updated the version of Go and added a check to ensure they're all in sync.

Author: johnstcn

.github/workflows/release.yml

@@ -19,15 +19,18 @@ jobs:
     name: Run Integration Tests
     runs-on: ubuntu-latest
     steps:
+      - name: Check out code into the Go module directory
+        uses: actions/checkout@v5
+
+      - name: Check Go Versions
+        run: ./scripts/check_go_version.sh
+
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.22"
+          go-version: "1.24.2"
         id: go
 
-      - name: Check out code into the Go module directory
-        uses: actions/checkout@v5
-
       - name: Get dependencies
         run: |
           go mod download
@@ -74,13 +77,16 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v5
 
+      - name: Check Go Versions
+        run: ./scripts/check_go_version.sh
+
       - name: Unshallow
         run: git fetch --prune --unshallow
 
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: '1.22'
+          go-version: "1.24.2"
 
       - name: Import GPG key
         id: import_gpg

.github/workflows/test.yml

@@ -19,15 +19,18 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
+      - name: Check out code into the Go module directory
+        uses: actions/checkout@v5
+
+      - name: Check Go Versions
+        run: ./scripts/check_go_version.sh
+
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.22"
+          go-version: "1.24.2"
         id: go
 
-      - name: Check out code into the Go module directory
-        uses: actions/checkout@v5
-
       - name: Get dependencies
         run: |
           go mod download
@@ -92,20 +95,23 @@ jobs:
           - "1.10.*"
           - "1.11.*"
     steps:
+      - name: Check out code into the Go module directory
+        uses: actions/checkout@v5
+
+      - name: Check Go Versions
+        run: ./scripts/check_go_version.sh
+
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.22"
+          go-version: "1.24.2"
         id: go
 
       - uses: hashicorp/setup-terraform@v3
         with:
           terraform_version: ${{ matrix.terraform }}
           terraform_wrapper: false
 
-      - name: Check out code into the Go module directory
-        uses: actions/checkout@v5
-
       - name: Get dependencies
         run: |
           go mod download
@@ -122,20 +128,23 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 5
     steps:
+      - name: Check out code into the Go module directory
+        uses: actions/checkout@v5
+
+      - name: Check Go Versions
+        run: ./scripts/check_go_version.sh
+
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
-          go-version: "1.22"
+          go-version: "1.24.2"
         id: go
 
       - uses: hashicorp/setup-terraform@v3
         with:
           terraform_version: "latest"
           terraform_wrapper: false
 
-      - name: Check out code into the Go module directory
-        uses: actions/checkout@v5
-
       - name: Get dependencies
         run: |
           go mod download

scripts/check_go_version.sh

@@ -0,0 +1,35 @@
+#!/usr/bin/env bash
+set -euo pipefail
+
+MOD_VERSION=$(go mod edit -json | jq -r .Go)
+echo "go.mod version: $MOD_VERSION"
+STATUS=0
+
+if [[ " $* " == *" --fix "* ]]; then
+    for wf in .github/workflows/*.{yml,yaml}; do
+        sed -i "s/go-version:.*/go-version: \"${MOD_VERSION}\"/g" "${wf}"
+    done
+    exit 0
+fi
+
+for wf in .github/workflows/*.{yml,yaml}; do
+    WF_VERSIONS=$(yq -r '.jobs[].steps[] | select(.with["go-version"]) | .with["go-version"]' -o=tsv "$wf" | grep -v '^---$' || true)
+    if [[ -z "$WF_VERSIONS" ]]; then
+        continue
+    fi
+
+    UNIQUE_WF_VERSIONS=$(sort -u <<<"$WF_VERSIONS")
+    for ver in $UNIQUE_WF_VERSIONS; do
+        if [[ $ver != "$MOD_VERSION" ]]; then
+            STATUS=1
+            echo "❌ $wf: go.mod=$MOD_VERSION but workflow uses $(tr '\n' ' ' <<<"$UNIQUE_WF_VERSIONS")"
+            continue
+        fi
+    done
+done
+
+if [[ $STATUS  -eq 1 ]]; then
+    echo "Re-run this script with --fix to automatically update workflows to match go.mod"
+fi
+
+exit $STATUS