treewide: upgrade to Go 1.23.2

.github/workflows/build-ccm-gcp.yml

@@ -31,7 +31,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: "1.22.7"
+          go-version: "1.23.2"
           cache: false
 
       - name: Install Crane

.github/workflows/build-os-image-scheduled.yml

@@ -67,7 +67,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: "1.22.7"
+          go-version: "1.23.2"
           cache: false
 
       - name: Determine version

.github/workflows/codeql.yml

@@ -40,7 +40,7 @@ jobs:
         if: matrix.language == 'go'
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: "1.22.7"
+          go-version: "1.23.2"
           cache: false
 
       - name: Initialize CodeQL

.github/workflows/release.yml

@@ -233,7 +233,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: "1.22.7"
+          go-version: "1.23.2"
           cache: true
 
       - name: Build generateMeasurements tool

.github/workflows/test-operator-codegen.yml

@@ -28,7 +28,7 @@ jobs:
       - name: Setup Go environment
         uses: actions/setup-go@0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32 # v5.0.2
         with:
-          go-version: "1.22.7"
+          go-version: "1.23.2"
           cache: true
 
       - name: Run code generation

3rdparty/bazel/org_golang/go_tls_max_handshake_size.patch

@@ -1,11 +1,11 @@
 --- src/crypto/tls/common.go
 +++ src/crypto/tls/common.go
-@@ -62,7 +62,7 @@
- 	maxCiphertext      = 16384 + 2048 // maximum ciphertext payload length
- 	maxCiphertextTLS13 = 16384 + 256  // maximum ciphertext length in TLS 1.3
- 	recordHeaderLen    = 5            // record header length
--	maxHandshake       = 65536        // maximum handshake we support (protocol max is 16 MB)
-+	maxHandshake       = 262144       // maximum handshake we support (protocol max is 16 MB)
- 	maxUselessRecords  = 16           // maximum number of consecutive non-advancing records
+@@ -64,7 +64,7 @@ const (
+ 	maxCiphertext              = 16384 + 2048 // maximum ciphertext payload length
+ 	maxCiphertextTLS13         = 16384 + 256  // maximum ciphertext length in TLS 1.3
+ 	recordHeaderLen            = 5            // record header length
+-	maxHandshake               = 65536        // maximum handshake we support (protocol max is 16 MB)
++	maxHandshake               = 262144        // maximum handshake we support (protocol max is 16 MB)
+ 	maxHandshakeCertificateMsg = 262144       // maximum certificate message size (256 KiB)
+ 	maxUselessRecords          = 16           // maximum number of consecutive non-advancing records
  )
- 

MODULE.bazel

@@ -22,7 +22,7 @@ go_sdk = use_extension("@io_bazel_rules_go//go:extensions.bzl", "go_sdk")
 go_sdk.download(
     name = "go_sdk",
     patches = ["//3rdparty/bazel/org_golang:go_tls_max_handshake_size.patch"],
-    version = "1.22.7",
+    version = "1.23.2",
 )
 
 # the use_repo rule needs to list all top-level go dependencies

go.mod

@@ -1,6 +1,6 @@
 module github.com/edgelesssys/constellation/v2
 
-go 1.22.7
+go 1.23.2
 
 // TODO(daniel-weisse): revert after merging https://github.com/martinjungblut/go-cryptsetup/pull/16.
 replace github.com/martinjungblut/go-cryptsetup => github.com/daniel-weisse/go-cryptsetup v0.0.0-20230705150314-d8c07bd1723c

go.work

@@ -1,6 +1,6 @@
-go 1.22.7
+go 1.23.2
 
-toolchain go1.22.7
+toolchain go1.23.2
 
 use (
 	.

hack/tools/go.mod

@@ -1,6 +1,6 @@
 module github.com/edgelesssys/constellation/v2/hack/tools
 
-go 1.22
+go 1.23.2
 
 require (
 	github.com/google/go-licenses v1.6.0

renovate.json5

@@ -103,7 +103,7 @@
     },
     {
       "matchDatasources": ["golang-version"],
-      "allowedVersions": "1.22",
+      "allowedVersions": "1.23",
     },
     {
       "matchManagers": ["pip_requirements"],