Bumps

[geyslan]

1. Explain what the PR does

8c62b63 chore(deps): bump go toolchain to 1.22.3
2ac1f85 chore(builder): bump pandoc to 3.2
396cbd5 chore(builder): pin protoc versions
435b593 chore: use NewClient instead of Dial (deprecated)
a9aacbf chore: bump go.mod and go.sum
8d69d7d chore(types): bump go.mod and go.sum
b99be7a chore(signatures): bump go.mod and go.sum
94ae61c chore(api): bump go.mod and go.sum

2ac1f85 chore(builder): bump pandoc to 3.2

It also updates all man by generating them with the new pandoc version.

396cbd5 chore(builder): pin protoc versions

This doesn't upgrade versions to avoid changes in the protoc output
which would require updating the generated code.

435b593 chore: use NewClient instead of Dial (deprecated)

grpc pkg introduced NewClient in v1.63.0.

SA1019  grpc.Dial is deprecated: use NewClient instead.  Will be supported throughout 1.x.

a9aacbf chore: bump go.mod and go.sum

Bump go minimum version to 1.22.0.

8d69d7d chore(types): bump go.mod and go.sum

Bump go minimum version to 1.22.0.

b99be7a chore(signatures): bump go.mod and go.sum

Bump go minimum version to 1.22.0.

94ae61c chore(api): bump go.mod and go.sum

Bump go minimum version to 1.22.0.

2. Explain how to test it

3. Other comments

[geyslan]

After this be merged. A sequential PR should be created bumping the main go.mod, specifically:

github.com/aquasecurity/tracee/api
github.com/aquasecurity/tracee/signatures/helpers
github.com/aquasecurity/tracee/types

So, only after that, we should update internal tests.

[geyslan]

@josedonizetti you may notice in f2d6129 that I pinned the protoc version to ensure that the generated files are not modified. But I would like to know if there is no synchronization problem with the client side when updating the versions of these files. If there's, what should be the steps to take? Or would you take care of bumping the protoc in a different PR?

[yanivagman]

Maybe a silly question, but why do we need to specify the patch version? won't 1.22 be enough?

[geyslan]

Good point. I should be using the toolchain directive here like:

go 1.22.0              // doesn't enforce any specific patch version, but doesn't limit it to 1.22.0 as minor.

toolchain go1.22.3     // do enforce this specific patch version

It's sane to make the whole environment to use the same version (patch or not).

[geyslan]

I decided to use toolchain only in the main go.mod. The others when imported by tracee will have already the toolchain version enforced.

[rscampos]

LGTM

[geyslan]

@rscampos Thanks for reviewing it. I'm holding it for a while since it's good to have @NDStrahilevitz and @josedonizetti feedback as well, since it will demand changes to internal tests and beyond.