uppdate

.github/workflows/ci-cd.yml

@@ -36,22 +36,22 @@ jobs:
     - name: Set up Go
       uses: actions/setup-go@v4
       with:
-        go-version: '1.21'
-
-    - name: Set up Node.js
-      uses: actions/setup-node@v4
-      with:
-        node-version: '18'
-        cache: 'npm'
-        cache-dependency-path: |
-          frontend/package-lock.json
-          landing/package-lock.json
+        go-version: '1.24'
 
     - name: Install backend dependencies
       run: |
         cd backend
         go mod download
 
+    - name: Set up Node.js
+      uses: actions/setup-node@v4
+      with:
+        node-version: '22'
+        cache: 'npm'
+        cache-dependency-path: |
+          frontend/package.json
+          landing/package.json
+
     - name: Run backend tests
       run: |
         cd backend
@@ -60,7 +60,7 @@ jobs:
         DATABASE_URL: postgres://postgres:postgres@localhost:5432/trackeep_test?sslmode=disable
 
     - name: Upload coverage to Codecov
-      uses: codecov/codecov-action@v3
+      uses: codecov/codecov-action@v4
       with:
         file: ./backend/coverage.out
         flags: backend
@@ -87,13 +87,18 @@ jobs:
     - name: Checkout code
       uses: actions/checkout@v4
 
-    - name: Run Gosec Security Scanner
-      uses: securecodewarrior/github-action-gosec@v1
+    - name: Set up Go
+      uses: actions/setup-go@v4
       with:
-        args: '-no-fail -fmt sarif -out results.sarif ./...'
+        go-version: '1.24'
+
+    - name: Run Gosec Security Scanner
+      run: |
+        go install github.com/securecodewarrior/gosec/v2/cmd/gosec@latest
+        gosec -no-fail -fmt sarif -out results.sarif ./...
 
     - name: Upload SARIF file
-      uses: github/codeql-action/upload-sarif@v2
+      uses: github/codeql-action/upload-sarif@v3
       with:
         sarif_file: results.sarif
 
@@ -117,7 +122,7 @@ jobs:
       uses: actions/checkout@v4
 
     - name: Log in to Container Registry
-      uses: docker/login-action@v3
+      uses: docker/login-action@v4
       with:
         registry: ${{ env.REGISTRY }}
         username: ${{ github.actor }}