build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 #481

	# SPDX-FileCopyrightText: 2020 SAP SE
	# SPDX-FileCopyrightText: 2021 SAP SE
	# SPDX-FileCopyrightText: 2022 SAP SE
	# SPDX-FileCopyrightText: 2023 SAP SE
	#
	# SPDX-License-Identifier: Apache-2.0

	---
	name: CI

	on:
	push:
	branches-ignore:
	# Dependabot pushes are already run for the PR itself.
	- 'dependabot/**'
	pull_request: { }
	workflow_dispatch: { }

	jobs:

	golangci-lint:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- name: Set up Go
	uses: actions/[email protected]
	with:
	go-version-file: 'go.mod'
	- uses: golangci/[email protected]
	with:
	version: v1.48
	# github.head_ref is only set on pull_request runs, not for
	# tags or branches.
	# For commits on branches and tags all issues are reported, but
	# PR runs only report new issues introduced in the PR.
	only-new-issues: ${{ github.head_ref != '' }}

	- name: Check for go vulnerabilities
	uses: golang/govulncheck-action@v1

	generate-required:
	runs-on: ubuntu-latest
	steps:
	# Setup go and stringer
	- run: go install -v golang.org/x/tools/cmd/stringer@latest
	# Setup python and reuse
	- uses: actions/setup-python@v4
	- uses: BSFishy/pip-action@v1
	with:
	packages: reuse

	# Generate
	- uses: actions/checkout@v4
	- run: PATH="$(go env GOPATH)/bin:$PATH" make generate
	- run: \|
	if [ "$(git status --porcelain \| wc -l)" -ne 0 ]; then
	printf '::error ::%s' '`make generate` left or changed files'
	git status
	git diff
	exit 1
	fi

	license:
	runs-on: ubuntu-latest
	steps:
	- uses: actions/checkout@v4
	- uses: fsfe/[email protected]

Provide feedback