feat: updated go libs. Fixed snyk and versioning issues

Signed-off-by: andrii.pavliv <andrii.pavliv@securekey>

Author: andrii.pavliv

.github/workflows/build.yml

@@ -7,7 +7,7 @@
 name: "wallet-sdk ci"
 
 env:
-  GO_VERSION: '1.23.4'
+  GO_VERSION: '1.25.1'
 
 on:
   push:
@@ -97,8 +97,8 @@ jobs:
       - name: Build docker images for test server
         run: |
           docker build -f ./images/mocks/loginconsent/Dockerfile --no-cache -t wallet-sdk/mock-login-consent:latest \
-          --build-arg GO_VER=1.23 \
-          --build-arg ALPINE_VER=3.20 .
+          --build-arg GO_VER=1.25 \
+          --build-arg ALPINE_VER=3.22 .
       - name: Save docker image as tar
         run: |
           docker save --output /tmp/mock-login-consent.tar wallet-sdk/mock-login-consent
@@ -120,8 +120,8 @@ jobs:
       - name: Build docker images for test server
         run: |
           docker build -f ./images/mocks/webhook/Dockerfile --no-cache -t wallet-sdk/sample-webhook:latest \
-          --build-arg GO_VER=1.23 \
-          --build-arg ALPINE_VER=3.20 .
+          --build-arg GO_VER=1.25 \
+          --build-arg ALPINE_VER=3.22 .
       - name: Save docker image as tar
         run: |
           docker save --output /tmp/mock-sample-webhook.tar wallet-sdk/sample-webhook
@@ -143,8 +143,8 @@ jobs:
       - name: Build docker images for test server
         run: |
           docker build -f ./images/mocks/trustregistry/Dockerfile --no-cache -t wallet-sdk/mock-trust-registry:latest \
-          --build-arg GO_VER=1.23 \
-          --build-arg ALPINE_VER=3.20 .
+          --build-arg GO_VER=1.25 \
+          --build-arg ALPINE_VER=3.22 .
       - name: Save docker image as tar
         run: |
           docker save --output /tmp/mock-trust-registry.tar wallet-sdk/mock-trust-registry
@@ -166,8 +166,8 @@ jobs:
       - name: Build docker images for test server
         run: |
           docker build -f ./images/mocks/attestation/Dockerfile --no-cache -t wallet-sdk/mock-attestation:latest \
-          --build-arg GO_VER=1.23 \
-          --build-arg ALPINE_VER=3.20 .
+          --build-arg GO_VER=1.25 \
+          --build-arg ALPINE_VER=3.22 .
       - name: Save docker image as tar
         run: |
           docker save --output /tmp/mock-attestation.tar wallet-sdk/mock-attestation
@@ -178,7 +178,7 @@ jobs:
           path: /tmp/mock-attestation.tar
 
   iOSFlutterIntegrationTest:
-    runs-on: macos-13
+    runs-on: macos-15
     needs: [ BuildMockLoginConsentServer, BuilMockTrustRegistryServer, BuilMockAttestationServer, BuildMockSampleWebhookServer ]
     timeout-minutes: 60
     steps:
@@ -210,7 +210,7 @@ jobs:
           echo '127.0.0.1 api-gateway.trustbloc.local' | sudo tee -a /etc/hosts
           echo '127.0.0.1 cognito-mock.trustbloc.local' | sudo tee -a /etc/hosts
       - name: Install and start docker
-        uses: douglascamata/setup-docker-macos-action@v1-alpha
+        uses: douglascamata/setup-docker-macos-action@v1.0.1
         with:
           upgrade-qemu: false
           lima: v1.0.4
@@ -265,80 +265,138 @@ jobs:
           docker ps -a
 
   AndroidFlutterIntegrationTest:
-    runs-on: macos-13
+    runs-on: macos-15
     needs: [ BuildMockLoginConsentServer, BuilMockTrustRegistryServer, BuilMockAttestationServer, BuildMockSampleWebhookServer ]
     timeout-minutes: 60
+
+    # NEW: ensure every step talks to the Colima daemon
+    env:
+      DOCKER_HOST: unix:///Users/runner/.colima/default/docker.sock
+      DOCKER_BUILDKIT: "1"
+
     steps:
-      - name: checkout
+      # Fetch tags so your version script doesn't print "No names found"
+      - name: Checkout
         uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+          fetch-tags: true
+
       - name: Set up Go
         uses: actions/setup-go@v5
         with:
           go-version: ${{ env.GO_VERSION }}
+
+      - name: Configure Go env (proxy & sumdb)
+        run: |
+          go env -w GOSUMDB=sum.golang.org
+          go env -w GOPROXY="https://proxy.golang.org,direct"
+
       - name: Generate and copy Android Binding
         run: |
-          echo $PATH
-          echo ${{ github.workspace }}
-          echo ${GOPATH}
-          echo ${GOROOT}
-          export PATH=$PATH:$GOPATH/bin
-          echo $PATH
+          echo "$PATH"
+          echo "${{ github.workspace }}"
+          echo "${GOPATH}"
+          echo "${GOROOT}"
+          mkdir -p "$GOPATH/bin"
+          export PATH="$PATH:$GOPATH/bin"
+          echo "$PATH"
           go install golang.org/x/mobile/cmd/gomobile@latest
           gomobile init
           NEW_VERSION=testVer GIT_REV=testRev BUILD_TIME=testTime make generate-android-bindings copy-android-bindings
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          GOPATH: /Users/runner/work/wallet-sdk/go
+          GOPATH: ${{ github.workspace }}/.gopath
+
       - name: Setup hosts
         run: |
-          echo '127.0.0.1 file-server.trustbloc.local' | sudo tee -a /etc/hosts
-          echo '127.0.0.1 did-resolver.trustbloc.local' | sudo tee -a /etc/hosts
-          echo '127.0.0.1 vc-rest-echo.trustbloc.local' | sudo tee -a /etc/hosts
-          echo '127.0.0.1 api-gateway.trustbloc.local' | sudo tee -a /etc/hosts
-          echo '127.0.0.1 cognito-mock.trustbloc.local' | sudo tee -a /etc/hosts
-      - name: Install and start docker
-        uses: douglascamata/setup-docker-macos-action@v1-alpha
-        with:
-          upgrade-qemu: false
-          lima: v1.0.4
-          colima: v0.8.1
+          echo '127.0.0.1 file-server.trustbloc.local'     | sudo tee -a /etc/hosts
+          echo '127.0.0.1 did-resolver.trustbloc.local'     | sudo tee -a /etc/hosts
+          echo '127.0.0.1 vc-rest-echo.trustbloc.local'     | sudo tee -a /etc/hosts
+          echo '127.0.0.1 api-gateway.trustbloc.local'      | sudo tee -a /etc/hosts
+          echo '127.0.0.1 cognito-mock.trustbloc.local'     | sudo tee -a /etc/hosts
+
+      # Install Docker CLI and start Colima
+      - name: Install Docker (Colima) on macOS
+        env:
+          HOMEBREW_NO_INSTALL_CLEANUP: "1"
+          HOMEBREW_NO_ENV_HINTS: "1"
+          HOMEBREW_NO_ANALYTICS: "1"
+          NONINTERACTIVE: "1"
+        run: |
+          set -euxo pipefail
+          brew update
+          brew install colima docker docker-buildx
+          colima start --cpu 4 --memory 8 --disk 20
+          # Select context (persists in ~/.docker)
+          docker context use colima
+          # Wait until the engine is REALLY ready
+          for i in {1..60}; do
+            if docker info >/dev/null 2>&1; then
+              break
+            fi
+            sleep 2
+          done
+          docker version
+          docker info
+
+      # NEW: double-check Docker before image loads (handles rare races/crashes)
+      - name: Ensure Docker is up (Colima)
+        run: |
+          colima status || colima start --cpu 4 --memory 8 --disk 20
+          for i in {1..60}; do
+            if docker info >/dev/null 2>&1; then
+              break
+            fi
+            sleep 2
+          done
+          docker context inspect
+          echo "Docker is ready."
+
       - name: Download artifacts (Docker images) from previous workflows
         uses: actions/download-artifact@v4
+
       - name: Load mock-login-consent server
-        run: |
-          docker load --input mock-login-consent/mock-login-consent.tar
+        run: docker load --input mock-login-consent/mock-login-consent.tar
+
       - name: Load mock test registry server
-        run: |
-          docker load --input mock-trust-registry/mock-trust-registry.tar
+        run: docker load --input mock-trust-registry/mock-trust-registry.tar
+
       - name: Load mock attestation server
-        run: |
-          docker load --input mock-attestation/mock-attestation.tar
+        run: docker load --input mock-attestation/mock-attestation.tar
+
       - name: Load mock-sample-webhook server
-        run: |
-          docker load --input mock-sample-webhook/mock-sample-webhook.tar
+        run: docker load --input mock-sample-webhook/mock-sample-webhook.tar
+
       - name: Generate test cli and keys
-        run: |
-          make build-integration-cli generate-test-keys
+        run: make build-integration-cli generate-test-keys
+
       - name: Setup env for integration test
-        run: |
-          make start-integration-env-flutter
+        run: make start-integration-env-flutter
+
       - name: Gradle cache
         uses: gradle/gradle-build-action@v3
-      - uses: actions/setup-java@v3
+
+      - name: Set up Java
+        uses: actions/setup-java@v3
         with:
           distribution: 'zulu'
           java-version: '21'
+
       - name: Setup Flutter SDK
         uses: flutter-actions/setup-flutter@v2
         with:
           channel: stable
           version: 3.27.4
+
       - name: Install flutter app dependencies
         run: make install-flutter-dependencies
+
       - name: Build APK in Debug mode
         run: |
           cd demo/app
           flutter build apk --debug
+
       - name: Run flutter and android tests on Emulator
         uses: reactivecircus/android-emulator-runner@v2
         with:
@@ -348,8 +406,24 @@ jobs:
           emulator-options: -no-snapshot-save -no-window -gpu swiftshader_indirect -noaudio -no-boot-anim -camera-back none
           disable-animations: true
           script: adb reverse tcp:8075 tcp:8075 && adb reverse tcp:8072 tcp:8072 && adb reverse tcp:9229 tcp:9229 && adb reverse tcp:8097 tcp:8097 && make integration-test-flutter integration-test-android
+
       - name: Docker container status output
         if: always()
         run: |
           docker images
           docker ps -a
+
+      # Helpful logs if anything Docker/Colima fails
+      - name: Colima diagnostics
+        if: failure()
+        run: |
+          set -x
+          colima status || true
+          colima list || true
+          colima logs --last 200 || true
+          docker context ls || true
+          docker info || true
+
+      - name: Stop Colima
+        if: always()
+        run: colima stop || true

.github/workflows/release.yml

@@ -7,7 +7,7 @@
 name: "wallet-sdk release"
 
 env:
-  GO_VERSION: '1.23'
+  GO_VERSION: '1.25'
 
 on:
   push:
@@ -32,7 +32,7 @@ jobs:
           cd ..
           git clone https://go.googlesource.com/go goroot
           cd goroot
-          git checkout go1.23.4
+          git checkout go1.25.1
           cp ../wallet-sdk/cmd/wallet-sdk-gomobile/gopatches/* ./
           git revert 3560cf0afb3c29300a6c88ccd98256949ca7a6f6
           cd src && ./make.bash
@@ -98,7 +98,7 @@ jobs:
           cd ..
           git clone https://go.googlesource.com/go goroot
           cd goroot
-          git checkout go1.23.4
+          git checkout go1.25.1
           cp ../wallet-sdk/cmd/wallet-sdk-gomobile/gopatches/* ./
           git revert 3560cf0afb3c29300a6c88ccd98256949ca7a6f6
           cd src && ./make.bash

.golangci.yml

@@ -1,8 +1,4 @@
-#
-# Copyright Avast Software. All Rights Reserved.
-#
-# SPDX-License-Identifier: Apache-2.0
-#
+version: 2
 
 run:
   concurrency: 4
@@ -13,9 +9,11 @@ run:
 
 output:
   formats:
-    - format: colored-line-number
-  print-issued-lines: true
-  print-linter-name: true
+    text:
+      path: stdout
+      print-issued-lines: true
+      print-linter-name: true
+      colors: true
 
 linters-settings:
   errcheck:
@@ -77,13 +75,11 @@ linters:
     - cyclop # TODO consider replacing gocyclo with cyclop
     - wrapcheck # TODO enable
     - forbidigo # TODO enable
-    - gci # giving spurious errors for imports of syscall/js
     - exhaustruct # Results in unneeded struct member declarations
     - ireturn # Required by aries-framework-go, a library we use
     - tagliatelle # JSON tags using camel-case required by the specs we implement
     - varnamelen # This linter prevents us from using "i" as an index variable or "vc" for a variable name for a Verifiable Credential, both of which are very common in our code
     - depguard # TODO consider enabling in the future
-    - exportloopref
     - revive
     - perfsprint
     - thelper

Makefile

@@ -12,9 +12,9 @@ else
 	PATH:=$(PATH);$(subst /,\\,$(GOBIN_PATH))
 endif
 
-ALPINE_VER ?= 3.20
-GO_ALPINE_VER ?= 3.20
-GO_VER ?= 1.23
+ALPINE_VER ?= 3.22
+GO_ALPINE_VER ?= 3.22
+GO_VER ?= 1.25
 
 NEW_VERSION ?= $(shell git describe --tags --always `git rev-list --tags --max-count=1`)-SNAPSHOT-$(shell git rev-parse --short=7 HEAD)
 GIT_REV ?= $(shell git rev-parse HEAD)

build.gradle

@@ -6,6 +6,7 @@
 
 apply plugin: 'maven-publish' 
 
+
 publishing {
   publications {
     bar(MavenPublication) {

cmd/wallet-sdk-gomobile/README.md

@@ -4,7 +4,7 @@ This package contains the `gomobile`-compatible version of the SDK. It acts as a
 
 ## Prerequisites
 
-* [Go 1.23](https://go.dev/doc/install) or newer
+* [Go 1.25](https://go.dev/doc/install) or newer
 * The gomobile tools:
   ```
   go install golang.org/x/mobile/cmd/gomobile@latest