deps: update Kubernetes versions (#3516) #1292

	name: CodeQL

	on:
	workflow_dispatch:
	push:
	branches:
	- main
	- "release/**"
	paths:
	- "**.go"
	- "**/go.mod"
	- "**/go.sum"
	- "**.py"
	- "**requirements.txt"
	- ".github/workflows/codeql.yml"

	jobs:
	codeql:
	name: CodeQL
	runs-on: ubuntu-24.04
	env:
	# Force CodeQL to run the extraction on the files compiled by our custom
	# build command, as opposed to letting the autobuilder figure it out.
	CODEQL_EXTRACTOR_GO_BUILD_TRACING: 'on'
	permissions:
	actions: read
	contents: read
	security-events: write

	strategy:
	fail-fast: false
	matrix:
	language: ["go"]

	steps:
	- name: Checkout repository
	uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2

	- name: Setup Go environment
	if: matrix.language == 'go'
	uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5.1.0
	with:
	go-version: "1.23.2"
	cache: false

	- name: Initialize CodeQL
	uses: github/codeql-action/init@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
	with:
	languages: ${{ matrix.language }}

	- name: Install Go Dependencies
	if: matrix.language == 'go'
	run: \|
	echo "::group::Install apt dependencies"
	sudo apt-get update && sudo apt-get install -y libcryptsetup12 libcryptsetup-dev libvirt-dev
	echo "::endgroup::"

	echo "::group::Install go dependencies"
	mods=$(go list -f '{{.Dir}}' -m \| xargs)
	for mod in $mods; do
	go mod download -C "$mod"
	done
	echo "::endgroup::"

	- name: Perform CodeQL Analysis
	uses: github/codeql-action/analyze@f09c1c0a94de965c15400f5634aa42fac8fb8f88 # v3.27.5
	with:
	category: "/language:${{ matrix.language }}"

Provide feedback