chore(deps): Update dependencies

[reneleonhardt]

Updates

• Update Go dependencies (4 years of technical debt, fixes high and medium CVEs)
• Let Dependabot update Go dependencies and GitHub Actions

Module	Required	Update	Old	New	Debt	Type
github.com/gin-gonic/gin	v1.8.1	v1.8.2	2022-06-06	2022-12-22	199 days	patch
github.com/gin-gonic/gin	v1.8.1	v1.10.0	2022-06-06	2024-05-07	701 days	minor
github.com/invopop/jsonschema	v0.12.0	v0.13.0	2023-10-04	2024-12-31	454 days	minor
github.com/stretchr/testify	v1.9.0	v1.10.0	2024-02-29	2024-11-12	257 days	minor
Technical Debt	Patch	199 days (1 years)	Minor	1,412 days (4 years)

TODO

Go version requirements seem confusing to me and make updating not easier 😅

Where	Versions	Code
Documented	1.19	https://github.com/metoro-io/mcp-golang/blob/main/docs/contributing.mdx?plain=1#L15
go.mod	1.21	https://github.com/metoro-io/mcp-golang/blob/main/go.mod#L3
Tested + released	1.23	https://github.com/metoro-io/mcp-golang/blob/main/.github/workflows/goreleaser.yml#L23

I would be great if all these versions could be clarified or even streamlined.
My suggestions:

• Tested should be 1.23 and 1.24 (the only supported Go versions https://go.dev/doc/devel/release)
• Released should be 1.24

[reneleonhardt]

@ecekyn Is there something missing?

If you want to help your contributors speeding up the review process, why not use CodeRabbit for free?
https://github.com/coderabbitai/awesome-coderabbit

As I mentioned, for the last open vulnerabilities go would have to be bumped to 1.23.

go.mod in main: 22 vulnerabilities (MEDIUM: 12, HIGH: 9, CRITICAL: 1)

Library	Vulnerability	Severity	Installed	Fixed
github.com/gin-gonic/gin	CVE-2023-26125	MEDIUM	v1.8.1	1.9.0
	CVE-2023-29401			1.9.1
golang.org/x/crypto	CVE-2024-45337	CRITICAL	v0.0.0-20210711020723-a769d52b0f97	0.31.0
	CVE-2021-43565	HIGH		0.0.0-20211202192323-5770296d904e
	CVE-2022-27191			0.0.0-20220314234659-1baeb1ce4c0b
	CVE-2025-22869			0.35.0
	CVE-2023-48795	MEDIUM		0.17.0
golang.org/x/net	CVE-2021-33194	HIGH	v0.0.0-20210226172049-e18ecbb05110	0.0.0-20210520170846-37e1c6afe023
	CVE-2022-27664			0.0.0-20220906165146-f3363e06e74c
	CVE-2022-41723			0.7.0
	CVE-2023-39325			0.17.0
	CVE-2021-31525	MEDIUM		0.0.0-20210428140749-89ef3d95e781
	CVE-2022-41717			0.4.0
	CVE-2023-3978			0.13.0
	CVE-2023-44487			0.17.0
	CVE-2023-45288			0.23.0
	CVE-2025-22870			0.36.0
	CVE-2025-22872			0.38.0
golang.org/x/sys	CVE-2022-29526		v0.0.0-20210806184541-e5e7981a1069	0.0.0-20220412211240-33da011f77ad
golang.org/x/text	CVE-2021-38561	HIGH	v0.3.6	0.3.7
	CVE-2022-32149			0.3.8
google.golang.org/protobuf	CVE-2024-24786	MEDIUM	v1.28.0	1.33.0