build: bump go version

[dextrot]

This PR fixes #713

• bumps go version in README.md, go.mod and GitHub Actions.

[github-advanced-security]

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 75.62%. Comparing base (0285961) to head (30298d1).

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #715      +/-   ##
==========================================
- Coverage   75.92%   75.62%   -0.30%     
==========================================
  Files          59       64       +5     
  Lines        5873     5994     +121     
==========================================
+ Hits         4459     4533      +74     
- Misses       1037     1078      +41     
- Partials      377      383       +6     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[shizhMSFT]

@dextrot The build failed because go 1.22 changed the implementation of io.NopCloser.

To fix it, you need to update the code

oras-go/internal/ioutil/io.go

Lines 47 to 58 in be59736

	// nopCloserType is the type of `io.NopCloser()`.
	var nopCloserType = reflect.TypeOf(io.NopCloser(nil))
	// UnwrapNopCloser unwraps the reader wrapped by `io.NopCloser()`.
	// Similar implementation can be found in the built-in package `net/http`.
	// Reference: https://github.com/golang/go/blob/go1.17.6/src/net/http/transfer.go#L423-L425
	func UnwrapNopCloser(rc io.Reader) io.Reader {
	if reflect.TypeOf(rc) == nopCloserType {
	return reflect.ValueOf(rc).Field(0).Interface().(io.Reader)
	}
	return rc
	}

to be updated with https://github.com/golang/go/blob/go1.22.1/src/net/http/transfer.go#L1090-L1105

More unit test cases should also be added to TestUnwrapNopCloser.

[shizhMSFT]

@dextrot Since we need this PR in the incoming v2.5.0 version, would you like to address the comments?

[dextrot]

@dextrot Since we need this PR in the incoming v2.5.0 version, would you like to address the comments?

Done.
Please take a look, if I need to make any further changes.

[shizhMSFT]

LGTM. Thanks for contribution!