Update golang.org/x/net to 0.33.0

.github/workflows/codeql-analysis.yml

@@ -58,7 +58,7 @@ jobs:
     - name: Setup go
       uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5
       with:
-        go-version: '1.22.x'
+        go-version-file: go.mod
 
     # Initializes the CodeQL tools for scanning.
     - name: Initialize CodeQL

.github/workflows/e2e-matrix.yml

@@ -46,15 +46,15 @@ jobs:
 
     steps:
     - name: Check out code onto GOPATH
-      uses: actions/checkout@v4
+      uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
       with:
         path: ${{ github.workspace }}/src/github.com/tektoncd/pipeline
 
 
-    - name: Set up Go 1.22
-      uses: actions/setup-go@v5
+    - name: Set up Go (from go.mod)
+      uses: actions/setup-go@41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed # v5
       with:
-        go-version: 1.22.5
+        go-version-file: ${{ github.workspace }}/src/github.com/tektoncd/pipeline/go.mod
 
     - name: Install Dependencies
       working-directory: ./
@@ -107,4 +107,4 @@ jobs:
             cat $x
             echo '::endgroup::'
           done
-        fi
+        fi

go.mod

@@ -1,7 +1,6 @@
 module github.com/tektoncd/pipeline
 
-go 1.22
-toolchain go1.22.5
+go 1.23
 
 require (
 	github.com/Microsoft/go-winio v0.6.2 // indirect
@@ -230,7 +229,7 @@ require (
 	go.uber.org/multierr v1.11.0 // indirect
 	golang.org/x/crypto v0.31.0 // indirect
 	golang.org/x/mod v0.17.0 // indirect
-	golang.org/x/net v0.28.0 // indirect
+	golang.org/x/net v0.33.0 // indirect
 	golang.org/x/sync v0.10.0
 	golang.org/x/sys v0.28.0 // indirect
 	golang.org/x/term v0.27.0 // indirect