Update build

[SuperQ]

• Update Go matrix to latest 3 versions.
• Update minimum Go version to 1.21.
• Update golangci-lint version.
• Update GitHub actions.
• Pin GitHub actions to hash, as recommended by OSSF.

[lestrrat]

I don't see why you need to specify a git commit ID for the actions. Is there any reason why you not just using v4 or v5 or whatever?

[SuperQ]

Pinning is generally recommended by the OSSF. Dependabot and similar will keep them up-to-date.

[codecov-commenter]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.37%. Comparing base (b0b9070) to head (26f4f46).
Report is 1 commits behind head on master.

Additional details and impacted files

@@            Coverage Diff             @@
##           master      #46      +/-   ##
==========================================
+ Coverage   81.75%   82.37%   +0.61%     
==========================================
  Files           7        5       -2     
  Lines         411      329      -82     
==========================================
- Hits          336      271      -65     
+ Misses         60       43      -17     
  Partials       15       15              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[SuperQ]

Ping, this would be nice to have to improve supply chain security.

[lestrrat]

@SuperQ Sorry, didn't see your reply until just now. Hmm, didn't know dependabot handles commit IDs.
I'll take your word for it.

Thanks!

[SuperQ]

Thanks for building this library. I'm thinking about using it here.

Time to cut a v1.1.0?

[lestrrat]

@SuperQ Yes, but not right now. I know better than to cut a release when I'm about to go to bed...
Made myself a reminder to take a look in 12 hours :)

[lestrrat]

done