From 026b1cd2a470312adc915a341f60414b07146d2e Mon Sep 17 00:00:00 2001
From: Kyle Carberry <kyle@coder.com>
Date: Thu, 2 Feb 2023 12:36:27 -0600
Subject: [PATCH] chore: update to go 1.20 (#5968)

Co-authored-by: Colin Adler <colin1adler@gmail.com>
---
 .devcontainer/Dockerfile                      |   2 +-
 .github/workflows/ci.yaml                     |  14 ++++----
 .github/workflows/release.yaml                |   2 +-
 .github/workflows/security.yaml               |   4 +--
 cli/gitaskpass.go                             |   6 ++--
 cli/root_test.go                              |   2 --
 coderd/httpmw/ratelimit_test.go               |   2 +-
 coderd/rbac/builtin_test.go                   |   1 +
 coderd/rbac/regosql/compile.go                |   4 +--
 coderd/updatecheck/updatecheck_test.go        |   2 +-
 dogfood/Dockerfile                            |   4 +--
 dogfood/files/etc/apt/preferences.d/docker    |   1 -
 .../files/usr/share/keyrings/hashicorp.gpg    | Bin 2301 -> 2879 bytes
 dogfood/files/usr/share/keyrings/yarnpkg.gpg  | Bin 11460 -> 10365 bytes
 enterprise/audit/diff_internal_test.go        |   6 ++--
 enterprise/tailnet/coordinator.go             |  28 +++++++--------
 flake.nix                                     |   2 +-
 go.mod                                        |   2 +-
 provisioner/terraform/safeenv.go              |   2 +-
 scripts/apitypings/main.go                    |  12 +++----
 scripts/auditdocgen/main.go                   |  18 +++++-----
 scripts/metricsdocgen/main.go                 |  30 ++++++++--------
 tailnet/coordinator.go                        |  34 +++++++++---------
 testutil/eventually.go                        |   6 ++--
 24 files changed, 91 insertions(+), 93 deletions(-)

diff --git a/.devcontainer/Dockerfile b/.devcontainer/Dockerfile
index 40cb654e6e..37adfa198c 100644
--- a/.devcontainer/Dockerfile
+++ b/.devcontainer/Dockerfile
@@ -57,7 +57,7 @@ RUN mkdir -p /etc/apt/keyrings \
 	&& echo '{"cgroup-parent":"/actions_job","storage-driver":"vfs"}' >> /etc/docker/daemon.json
 
 # install golang and language tooling
-ENV GO_VERSION=1.19
+ENV GO_VERSION=1.20
 ENV GOPATH=$HOME/go-packages
 ENV GOROOT=$HOME/go
 ENV PATH=$GOROOT/bin:$GOPATH/bin:$PATH
diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml
index 2f879b2fb3..515076b4bc 100644
--- a/.github/workflows/ci.yaml
+++ b/.github/workflows/ci.yaml
@@ -37,7 +37,7 @@ jobs:
       # Install Go!
       - uses: actions/setup-go@v3
         with:
-          go-version: "~1.19"
+          go-version: "~1.20"
 
       # Check for any typos!
       - name: Check for typos
@@ -55,7 +55,7 @@ jobs:
       - name: Lint Go
         uses: golangci/golangci-lint-action@v3.3.1
         with:
-          version: v1.48.0
+          version: v1.51.0
 
       - name: Lint shell scripts
         uses: ludeeus/action-shellcheck@2.0.0
@@ -151,7 +151,7 @@ jobs:
 
       - uses: actions/setup-go@v3
         with:
-          go-version: "~1.19"
+          go-version: "~1.20"
 
       - name: Echo Go Cache Paths
         id: go-cache-paths
@@ -250,7 +250,7 @@ jobs:
 
       - uses: actions/setup-go@v3
         with:
-          go-version: "~1.19"
+          go-version: "~1.20"
 
       # Sadly the new "set output" syntax (of writing env vars to
       # $GITHUB_OUTPUT) does not work on both powershell and bash so we use the
@@ -333,7 +333,7 @@ jobs:
 
       - uses: actions/setup-go@v3
         with:
-          go-version: "~1.19"
+          go-version: "~1.20"
 
       - name: Echo Go Cache Paths
         id: go-cache-paths
@@ -416,7 +416,7 @@ jobs:
 
       - uses: actions/setup-go@v3
         with:
-          go-version: "~1.19"
+          go-version: "~1.20"
 
       - name: Echo Go Cache Paths
         id: go-cache-paths
@@ -545,7 +545,7 @@ jobs:
 
       - uses: actions/setup-go@v3
         with:
-          go-version: "~1.19"
+          go-version: "~1.20"
 
       - uses: hashicorp/setup-terraform@v2
         with:
diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml
index 080e6da56b..f33aaa0d9d 100644
--- a/.github/workflows/release.yaml
+++ b/.github/workflows/release.yaml
@@ -91,7 +91,7 @@ jobs:
 
       - uses: actions/setup-go@v3
         with:
-          go-version: "~1.19"
+          go-version: "~1.20"
 
       - name: Cache Node
         id: cache-node
diff --git a/.github/workflows/security.yaml b/.github/workflows/security.yaml
index 310b04cb94..15438f2eed 100644
--- a/.github/workflows/security.yaml
+++ b/.github/workflows/security.yaml
@@ -38,7 +38,7 @@ jobs:
       - name: Setup Go
         uses: actions/setup-go@v3
         with:
-          go-version: "~1.19"
+          go-version: "~1.20"
 
       - name: Go Cache Paths
         id: go-cache-paths
@@ -68,7 +68,7 @@ jobs:
 
       - uses: actions/setup-go@v3
         with:
-          go-version: "~1.19"
+          go-version: "~1.20"
 
       - name: Go Cache Paths
         id: go-cache-paths
diff --git a/cli/gitaskpass.go b/cli/gitaskpass.go
index 0296ca5266..4c78c47728 100644
--- a/cli/gitaskpass.go
+++ b/cli/gitaskpass.go
@@ -69,12 +69,12 @@ func gitAskpass() *cobra.Command {
 
 			if token.Password != "" {
 				if user == "" {
-					fmt.Fprintln(cmd.OutOrStdout(), token.Username)
+					_, _ = fmt.Fprintln(cmd.OutOrStdout(), token.Username)
 				} else {
-					fmt.Fprintln(cmd.OutOrStdout(), token.Password)
+					_, _ = fmt.Fprintln(cmd.OutOrStdout(), token.Password)
 				}
 			} else {
-				fmt.Fprintln(cmd.OutOrStdout(), token.Username)
+				_, _ = fmt.Fprintln(cmd.OutOrStdout(), token.Username)
 			}
 
 			return nil
diff --git a/cli/root_test.go b/cli/root_test.go
index 7f5442233b..85863b656a 100644
--- a/cli/root_test.go
+++ b/cli/root_test.go
@@ -30,8 +30,6 @@ var updateGoldenFiles = flag.Bool("update", false, "update .golden files")
 
 //nolint:tparallel,paralleltest // These test sets env vars.
 func TestCommandHelp(t *testing.T) {
-	t.Parallel()
-
 	commonEnv := map[string]string{
 		"CODER_CONFIG_DIR": "/tmp/coder-cli-test-config",
 	}
diff --git a/coderd/httpmw/ratelimit_test.go b/coderd/httpmw/ratelimit_test.go
index e004fb3ed3..4a1c637b58 100644
--- a/coderd/httpmw/ratelimit_test.go
+++ b/coderd/httpmw/ratelimit_test.go
@@ -24,7 +24,7 @@ import (
 func randRemoteAddr() string {
 	var b [4]byte
 	// nolint:gosec
-	rand.Read(b[:])
+	_, _ = rand.Read(b[:])
 	// nolint:gosec
 	return fmt.Sprintf("%s:%v", net.IP(b[:]).String(), rand.Int31()%(1<<16))
 }
diff --git a/coderd/rbac/builtin_test.go b/coderd/rbac/builtin_test.go
index 220d5df412..92ed3da501 100644
--- a/coderd/rbac/builtin_test.go
+++ b/coderd/rbac/builtin_test.go
@@ -360,6 +360,7 @@ func TestIsOrgRole(t *testing.T) {
 
 	// nolint:paralleltest
 	for _, c := range testCases {
+		c := c
 		t.Run(c.RoleName, func(t *testing.T) {
 			t.Parallel()
 			orgID, ok := rbac.IsOrgRole(c.RoleName)
diff --git a/coderd/rbac/regosql/compile.go b/coderd/rbac/regosql/compile.go
index 599348b0e4..398cbbf54c 100644
--- a/coderd/rbac/regosql/compile.go
+++ b/coderd/rbac/regosql/compile.go
@@ -46,9 +46,9 @@ func ConvertRegoAst(cfg ConvertConfig, partial *rego.PartialQueries) (sqltypes.B
 		}
 
 		if i != 0 {
-			builder.WriteString("\n")
+			_, _ = builder.WriteString("\n")
 		}
-		builder.WriteString(q.String())
+		_, _ = builder.WriteString(q.String())
 		queries = append(queries, converted)
 	}
 
diff --git a/coderd/updatecheck/updatecheck_test.go b/coderd/updatecheck/updatecheck_test.go
index 8e1802b27c..3a926473fb 100644
--- a/coderd/updatecheck/updatecheck_test.go
+++ b/coderd/updatecheck/updatecheck_test.go
@@ -44,7 +44,7 @@ func TestChecker_Notify(t *testing.T) {
 
 			w.Header().Set("Content-Type", "application/json")
 			w.WriteHeader(http.StatusOK)
-			w.Write(b)
+			_, _ = w.Write(b)
 		}
 	}))
 	defer srv.Close()
diff --git a/dogfood/Dockerfile b/dogfood/Dockerfile
index 52915db09b..cccededb57 100644
--- a/dogfood/Dockerfile
+++ b/dogfood/Dockerfile
@@ -8,7 +8,7 @@ FROM ubuntu AS go
 
 RUN apt-get update && apt-get install --yes curl gcc
 # Install Go manually, so that we can control the version
-ARG GO_VERSION=1.19
+ARG GO_VERSION=1.20
 RUN mkdir --parents /usr/local/go
 
 # Boring Go is needed to build FIPS-compliant binaries.
@@ -210,7 +210,7 @@ RUN systemctl enable \
 ARG CLOUD_SQL_PROXY_VERSION=1.26.0 \
 	DIVE_VERSION=0.10.0 \
 	DOCKER_GCR_VERSION=2.1.0 \
-	GOLANGCI_LINT_VERSION=1.48.0 \
+	GOLANGCI_LINT_VERSION=1.51.0 \
 	GRYPE_VERSION=0.24.0 \
 	HELM_VERSION=3.8.0 \
 	KUBE_LINTER_VERSION=0.2.5 \
diff --git a/dogfood/files/etc/apt/preferences.d/docker b/dogfood/files/etc/apt/preferences.d/docker
index 1569e645f5..a92c0abb03 100644
--- a/dogfood/files/etc/apt/preferences.d/docker
+++ b/dogfood/files/etc/apt/preferences.d/docker
@@ -16,5 +16,4 @@ Pin-Priority: 500
 # containerd runtime
 Package: containerd.io
 Pin: origin download.docker.com
-Pin: version 1.5.11-1
 Pin-Priority: 500
diff --git a/dogfood/files/usr/share/keyrings/hashicorp.gpg b/dogfood/files/usr/share/keyrings/hashicorp.gpg
index 0d3082b232e2b31f9becdaf3b5f73ace4516d39e..674dd40c4219e7f397ea58978a945ccf952b79ff 100644
GIT binary patch
delta 2798
zcmaLXcRbV&1HkcfHizSo9T8HYG9r7Om7MHR>U8!xBl}CTw@`LSM7BF*oos&M?3qn=
zgsgK<Pp{|q@AL2H_4@q#CNQ?L0_k8nGGue(G6@v42Agau&kX2dcIa$cC3BV?^vgNj
zQRQE$j_<x}WN67I+YyuyWs%C-{wO1GyOGO`LnOcCzLycZ@LELPx7mJy&OSuunLAv1
zJ?2*y8E4dE>sfZ+uACLKGYbcbm-O|^&o^ujhq__rCo#gFj*2C$ZBF95Ko>cIb*d;!
z<K0*97Js_%>6bsNA+ji`E~1W40pIy*RwrnKZ^bU$CaO<sCN>))Woqj$(Ia2HRbyr@
zdbP)}&|~k|e@^}F877kWPGO7JfNApgR=a<UNK2T`5TW`Izx{sHQ7-GDd*qEI?h&Lo
z(?p6-t;xjXE4n^I2U#95pr^);8Ef}x@y)s(3ySh>`%2UBPCPO%49SzlT#Gw2@t5S`
z!y#(BPu8RaKbt}Jo?EmP4p+t`9fv`fv5W?T@d+!XqeZ*FH>RG=2Rcdu(ji>&`36?O
zvAo5#<(OQ4#(BSi`Uy_?FF_MEHW1w=d}zCRC5bo1Wf)~`L60*4<u0QVmu4b5PcvxJ
zdZ}LC7jhG@RTxhAexep`s$1}Klm@N2;|>dH49^+H^RR~trY!f)Wano<%o3R|0PT*<
zpQ%PmQo*LIzwNqM{4eI?$wB>hw%YdnA6bsd*(_4Nbq)`!zTh{J(k||h6U1&Wak&T3
zA-5z*<CLow9G4j)P>uLvWmC<a2Rzu6pwc(AU~@`CG8hRJNa0Nsm=j>-BlC^kexYZ{
zq7oagvRlG>(e#mTorD~WY;KY#r=~`cOoM2sq5t+dKPc!s#ppuPm|Anc5B?7E5d8su
zFnbxPTef+|jF=O#<q<02_;o0_<QBgoI=j5c5Z`&lo2j84H|!~D<dok_7pImbgL<6k
z)y8MT5l#cVzk1yu@DSG0G4BCuw7*(*Gi*!G)o&WRHB?OrrZ)LPCtY?lHr5nHU&DX%
zG1kDsxP{FY<5U-?*uW#$xAEZ!qs#{P6J%6Ua3Fqh4Y4sr0P`1JBc(mtA#7IJr*-nz
zf<<3txwWbY<J?6O;~77cr5tnaa}M0nT^IDLDQ5v1;(9KGm}s?r@Jl)mvVxJBf&yIX
z*JjWpL5{81uO*{SB1y1XVI3#_mxv9-<29|}hreAcr`O6It?w%djxaF@m^@ojRPK5z
zVkE_?RhJ=Jpur1&Z{XDHB<{OJN0H1+(0TRj-a7O|AEJlcPlBVz^Y7G{h+E(l1L6}G
z6h?sZi)rm{pGEB?smGIm5p+rH*ZeMR2S037w={J{k)@dGZT_jvGFilgr^M>K6))9p
zv}a*w3#oA{m6#T)d+31shjUbKlyNjA!?hPY!BVA;>N)z#Amf4GE?=fA7)r$8E~aDZ
z;z!MzKY$WGhfsx;GL@0Ix%7Y7Z8~Om$-RKG%JMFr=FhJ-5=bShr{D8Gj?<44{amPF
z;~^_;%~3mCQp;?`ru{=D&Ri^^zHy<CwdRiO#|GDizpOOD{;)E<<sX^9eB7Q@l+MU`
zX>=+NdSfree)IDl15cu<&sIk&)fn%s44r{*&nT|rsL9Xdv<_Zl&G(@cr$3YffOF4T
z)V@U#&2fM~H={lqJ>hDi4~Q_~34c5erkz@g@S?dr?4Ul?{D5r&M^8mK?6L2_l|3A@
zpvart4}lt#U&6+~5;OPL>8-rW9zbOj3f|Xs4*N`<56|%2ug9O+mU4sNOo%pR`fZ#q
z+%}VqXZu)Jf6mU;?tnFoMB^dA_eO?hY!LXl>|#4Hx8+xtK9%!xgvOPR!@dpG4HeKk
zck{mHZQ`=*<IZ(w$*h9S_)-GlC%*+hdbwc9283<zo{tmL_VDo)C);U3t7bH)aTxI)
zCeOt~Lkr%-lXS7pl<J;MtCg$1MB+BHD`l`KiBmc{8}Qta4o|kWmRkUTE`g-M`oWI$
zV~}*H3JT&a`P8#WtH?l+pQ9$Ad({=Q`K1}Q%>HfEQ{74M!vkv;f(cu1g~y^1^eVSn
zb(q;r0A>;y{uN8jJ`L|Lt}SdOJrS-dk%0LY@e6bHRQd#Y#D2FQx#E_ku~8*>I>KZV
zihh+Wn|at-Wv!y7lnodbU6QQ0W84VodoM71E!}xLGq;QEku(D$4NEDf8B$Z?HK@Xg
z3ou>H2|@Hpqx3auzsvh;R+o6mkYV`yf~4mNi)3?E5F-hQB#I18#`Xsm!T)Cp49p4s
z%Std<=?^Qw|Ga7Q<RxSO^K$=rw`h)*(zWc(T+<^I++0wh_PDT(zaGK<E78AY5CH{6
zKbL^AT9jl(6wz4tM%O6{^N!WoUDMY`n2TZxyi$2qieLP+20|3`>PL78V&rJTQR)F{
zqnqRzgJq6zjYT*b4#;tSW=>rD=iW@54BA|OQ!p$x@+=p$E=g)anK#2MAbFkiA#%KC
zBs`Akn3wixiZ343Tp3YR_`6ZvqKJXKA(X!Qz_u~F*B4uPcxxa6!6lm=)n9QXAxfNl
zv@LL07WX=F>`Z&|)AvZ$as*fDca5QPy)&I{8EeCvwpi4}Z2+TkVZ66R=Z<uHQ06O4
ze7If%x<=yOCr<D&*fL`LItgK!p>JF$Z2mNrN}cm#d!rrQJwY$ORh0v8Isv7%q>pz~
z_20{ElIguxDuKwWaaYcE72}%AKZdo*7=m1eV#CIoHslSb0Y<iG_^l<I3JhU;#kO}{
zK`zM8a8Y#=IQpUb;I%v>oxdL3$PCZ@O{^T0nnr3XkA%{#eztRUk%$an7I^fj>V^)u
z-<y-kguZW+@7<yGBhyq!I55uNkEf&La8Y3DeB~LG3;OA=hiLyLAG)0wCMv8>=O~kg
zMK>VnkNpl%*O7uXG4dT{!D%cnfAOh#`n(o>KQg`m6u2P7b8<s(^)H>OQDTz~g#G*O
z(;k0Qz2R{z)NBQ2x_+g1{a&0j+)2$RAipIb2Ts%s3i?MbbM%f*G3T0+B)>of1JRQ1
zsDL<P{K&Yn@`!QPdDUAb?`p2js>i+%EskJyc}OPX+F>CbtLE%Wt7A28(%nkh*G!0&
zUXAes`~r1R{-kDPT+v98W0_H~z*BqHRq!qn-R8R36_r!4O_8#+#`s+gbJ9X+jk?>y
zrYs8q_Mc|X?|f2<VUf)t^zv1h(C9E{CmN7q*4S5-GCFUwats|XiPWY6LE4s(+9kV9
z>gY%gmF+=?MC!OgcHHS3Jr5^nz21eJ2`6wEH04d3Xf-1Af{21_+xC~EP<q0BBjq~_
z%Pms^dXF5~<Q_mUImxj8(I;mVg$%cWH#X&gWh3HUb4oiQX)*|7A)AD%N0^ApTSQ{_
z<Q%D(yql;;;7GH{bFE*8cI;D66pA?pPmHZpGhDEiUykNiV)Hh2&FNC>Dx2c-<ADrD
zl;&!+tPLEIjMzn2=q1^Tb(QJxsX9hWx;#vo`=nRZnS8K!N9ZIL9U2E^)5M(n<(umo
z%??t_u2a#(#z`ckk}Do6mlZi{D_zN+EK;gWG_5}ox2LR@h#7*euJMjnyv=1{Xnr@P
z0AtpW^U{3XL2*Mn!UD&19MnoGqy>As)fus|Gk>M(=hLrv3MmJ?mw1FqRj@~p>m-FG
v=Yl!fabYx(4Y{O6{!qf-`vp#k#+Wa2?+I=081Cw8EWN@6XzdkbCpzyxN)1ol

delta 2215
zcmV;Y2w3;O7X1-_nF0+2UbIf;0T2MoOH&W+dd!s>C)JL4alMpsRSX}&<RKTqt{FKk
z>OGLwT>oSPE@x0~E!1t9Gt%W`9;U?(1$mSS?vN?*g1<qka`YIQPVdQH?f`;p&Ra){
z(<h)SIO|9${kgJXlOmSVz}I8&6N{=LF&J3?^uAa1E@Xaxt?#zxE&5rpDncs|_|jr=
zQB4h|OurE`-S!xo9siX{+wPdYu%op5x&F1Z*nL#lk>XC(`ebRyzW?l|va%H#lgEM^
z`j1z^dLR6|u}sQUz=6`tCK{Z6VLi_BL}IfddqGR*L!xh?_Q|pARN$n1EkO}RF4brq
zdX6`#*G#d0Ly%1IujkjR_TUFnoYgzCzJj{bT<t(;VGW@VmV&A^V>}*?$x~Emo`tLC
zGlflvk2Bk{3eiolnS=Igcq_{gK;F~ZDbeLiG^3q#7N?IySC_!zR5C3>ZRRRecgjPT
z7Gmh!E6Q))U0UhXftXj^cN=gbfHmlx!mbMfdg+sY4)U&q=#z5R_VUWh|JAUTDAdiI
zx<_C}1-MW5e&5*E%uD*|Z!XN$XtOEmHnu{Q$gi+TMUumzEfko$krbpKy6?;UtW(l9
znXf!gEAl!5Gt|^kU5gg)=Iet6=eU~MIJSZ1sIG=t;3|~Qy#GQLCi?+xkU4v-w8nd+
z<q;AOY+y@?D#niZ3gK|GUbjz^3j$gsP6QJH2mm-1Aq424GT@Zh>rSDG(s0^AjEJKl
zpL+!YUbIf;lWYPTe*g*z5ZXbEh@&B&d#~0H|6NSa^*JaTy(8&7la6wJOV)FWL=tJv
z+W1#VG8%w`YC;hH%%pA0hg|;s6k_wN&oe;l8@*b8XK8F$8S#-n3Rus)Eu2_Rghq9k
zYlh)Z9ba94OTe*_qO$HDjBw|8bCWxAs#c3+lP&m-M56@0f6(&m7afml`<PqfosGSx
z&DRYW)dgX1qGOK*heyO;_NfveNV=QaJZn=q<0JyxFWIinzTjQ+XN#D9JM%LkUynoi
zR$wS<j0;H@TifzeIlHv`I!ZU=<75v3a&w>lo9dWM{M=F>qpZm-CoxS{fWkgV&-l{Q
zjC&IBZXo^df2IrdN2>m}N|gV&X}hzW(c3YEzk=`@Rby_y+8fuSGkJJzGO;Wk#;hf?
z=I2HSdMVlmm0?YNwY)?l%E`a%`q_o3U>N-gu`)}ff_2bZ@Mvp6oxflORJJas+eABD
z#p5tfhnf(;1;aMyOH6WjDr|(oYYsq_BQzc|;jZI|e`pHtwD>5c>7%+;4F43b>t-~6
z-TU?hj~d@5^{wM7MCI0I6z|2YLoXm`B{;C{1LUGX?)M^*9&8^Eilb$yosCnrtG48E
zVFf~>TYmpqZXkRW`W+IS$`lgzDgxY3C-ZkDsIs+bUa<4UTKH7_k(2^gd2)di+6LIR
zSEpC@e<pS~r63!*(!&xwVR`?kF9ZNT4Y>jh1YWdG<^d1@(Bbu_eJ^xJ(wkWwsDRJh
z6~PZcQ5@4?8l0D16iF4Rscvd+?liC5TQ4{BW*cx^Ep^Kl{22Y>4zH*2M<>2(ky1cQ
zZw7KT7;|P1k$_b{$0{r<PnWkv<bM?eyM!gye^Y~i*|MfcM`S17b~YTCdmsvKLxF+0
z<q{iKI0sB4yey^Rz?5+6d}U54aN+n@T?s@Z|0Z^=xl+tmTnpGOaFntgXbwTuKoRQ%
zXI`Oknj`z8zUURsL1U=wL&NS+J!@K?uo)6X%ut_?2vt^gLmiLUTS9zak`;f4LE4EL
ze_eU25jhET?j$2730c;L_X}H%Ik;cPn88<ep{Q&?;zGeiLbvHXQ=;KNbXG;YKh12o
z`T&(^ZPY4hHhH01ThBtn%Kn6m1QV|~LG==KiE7up$cZm_*6Pl&J6_%Fj9#S5rP>$j
zmhk5Ty&?a83)OdRM%O^5@3wYXqL#h*f419N7LVntfj=Axi}V3mnk^F^b*S!QQ_(}h
znq{F9&8?nZ2o5m*OG3})LI=lx1d)0~n<@{>>C0*R8rje@<KiME^Wpdp6v!@$Kow=c
z)vvBGT6~#a`+yHm$zA6nO7MZEQ1HiLpsX)9|B`O_X?Hw@QRy=<|HnC?x+VZ9f0|pc
zoKT%GF<RVH0vB`?aEzGeo{)BdL+%c=-+XFUtIPS{01*KI0f_=O1Q-Db03a421n8hL
z;FQ?wPN9j?aN0qPh@&B&dj$esv`*#%8w>yn2@u*rjEJKlpL><(5Bmh*N~l85bmdaW
zQSw!5%s{Sqh&PTM{*{h;YHwHIf65uyFcu+lqgbU@JDyfOfc4}K{!Os*Z;avRnY`4z
zQl(u2NfUTz`=Z8+7C(n{m+ku8J%ys@bNLLfpsq>U!i7A?;dM9$utpU-_FIPQIiT3I
zk~I?#)jN!Jk4t!^zE9xTU!+g3B`@EoqKRI4KcsLQ+bZ5X?3E6{%H)`Oe~o3>e5z~A
z0U$1@7X)&s^Y^J05W-k)8TPVAu_^K=a*980*s;u&8=jeI4fvZE6$gg(mUjX#;z@U6
zdcr87k`97g8(EdH2cRp6)>LZhW5Xv1jy#HsPuIqA%A>M!#&5G|&6rtAz&~u(YUQuq
z$7fR*Y_+Q%tvaIt^aC|fe>1ytFs{V7c?B)X8uF-jqA2I^?E&u-PAZhy*f`pa5B0;z
z>X^v6XLX``sIMw`KklBK=y2;QIuK#aKYr+SVsiS>k+uT4^*aYau(0LK^8QASVmAs2
zg`cdq8W~TIA^?S`oEr;MU0C?Uuvyb}5*{_wbkn+e#IvNDe8C}{W%#?k^$2De@)FG|
zIM2vY9Z1nzY`V0k@t`_mU}^7vhq|Fl$6f!l@_`{rIuE)3%LOG2Dm%i^uxTh4KMt-J
p?E=WNkkS^P+CH$<;CyQ#21-QF5guzIV2OWo2E)Px2x`Qv2Y&U*Llyu4

diff --git a/dogfood/files/usr/share/keyrings/yarnpkg.gpg b/dogfood/files/usr/share/keyrings/yarnpkg.gpg
index 686583c75c24a1f36f0e8023a06845ed950be17b..32a096756e31710f2790d891a9ad1e6ae262e66e 100644
GIT binary patch
delta 1090
zcmV-I1ikyjS^ZG3vmKLYC?g7E&wGRg2@OWk^Rp)+D*}IXu@C=D<|%&aCPT2Z1w#87
zCNx%_tB=JM!G9n(Y9h&A$&A5g(sW4D+>)x=8qO(H_ZA5a2yk(P^h6->A(T$UuxXuQ
z`}1+;9y7x3D}dE7h~uWhCC4Pbhj@@Rsi+|~@VT6v9t-^xWlj=W?Vj3?W1v}B7fRKY
zKu>fyh5dhiqh%TDj$m?Yx~(2?mJ2F$XE|IauVGe+?xYvIxKz>%*2tY{|Mz$e1uCs|
zz57<hgZMB!S^i`i4&zVAqWmZ!+BL;~DJlW@?WM&;aCzLgO}6*A+hxNN<R=9@4Y|wl
z01tIeVQth9)yq{v6A43TqY~jeu*R@N1gtE$8lHcYlf-a5^SA7;b9m38TFtC3b1skt
z-BZF)DIeQgTd9iZ7cbO(32ZxVq9zy5#)8Be+k#@>gRYs;|4{9Cs;zq4erH+9^pP0@
z89YKaT&2?*=0I%=SY5rpU-KlA#{YFj+~&#XNOQEoq6`Z9Y@JxkBu-;Mmxr7g>R*Br
z-vfV=Lt8^soAqz}Ffx}nz6E^OJQs{yFf1JBAK(uVRvUedep=IXDLuhlT}B0t(k-qx
zgUdNm2A#_AA4CYuw)#i3Q%LTl)uk64b4OlY`mrM8og$RK@G5TAYn5R_<7Hhs2xON~
zgZ<v0XxsZmvU_BW3De^j&br?}mBFS%RiFshs&xC?0SUjeRwgw93S-ZEjs*z~J0PF4
zl_)C$f6*ck0KrYrSyV{=Q;4e56v+GaHv%j-fWA*Yhq=v<_ho=OQJ0A+ujS7DtrbrK
zyj@!}G!8cuJCo64kvwkqEs0<zE?{)GmZ5fpoo!$FoRQk+JpDs%@_aAZ)604C+lIBN
zkp|qZBdz37%j;Hr3Z@$CyXM%rE7u_Y%XP&9f8chHcv}ZrMaE}0!uc5alK|cG8~K*N
zm0xm{+4wPR%GsS^%q<4rb|&jT5^kwuy*cy%6ubnDAaItCwIzG{y1r}n4hS2aNsVd*
zu!kD@WCtj$rlO;Q<iGcyx9>M95wyZhe^TXnl9s}SV^2Qny1UBnDYUs8gY<4(yuiMG
zf1u~A#X?iwN8m`Tr-E%{ZuT5_ktDjf-L^6YAiueNq7zfi9A~-#=bh@^$Vo$i?sNeM
zg-4Csba5fSE2ccS+9ze3NPBTcLhv2M&X*pgFZi|$my0o=tb~Ns={N7WwOAX+V=+n~
zS|!TSKKP=C4@%8695Za}<MQ=xIAj52f1GRRX)}al6JSV>ILSx$-%bdG|CIKY97b|*
zB+e;2Hy39U;%>Ab*i3z0mC=#EW0Cd@zRec~aFbGWrR8N+l+ozgg#z38u({3l)XuJP
z{_YP0dKJ^qR#IWsrPVI>&5I^3gGq0}doq6ux*>nCm+1gMlWRqbm+*g!(dMp92x`%?
IS9>{~#{n7}wEzGB

delta 1642
zcmV-w29^2!P{diVvmF&g1Q-DV01pKMTr5Np0viGa2?7cdlW`Xlv*;Ze0)M+55B?wm
zv!2{ej|~jWCFGLAotT4}*|Od_QaouQ+EQv0<Rb2(CcT5Wg&tNbNsqMFxRI;|kF|_+
z$I2&vC2=p;Wn1xY=jxo*@p%^)VaSLbsto4yWanIazlEhSVr4Hjw(Oc?W#vTEIsceI
za~yD?U19citRQV{-KU9hwSTtk_WDmZri||5Vs)(Ji!=)mp^frKqmB;OwHG6xr?%z5
zI8!2o8}s!dC$NkJjm|!|=v+`Ig^DqG6o5B{1-swJB1)fW2oXFcQq}`rtzmkvth4k6
zR#BRxNSiE-8kY*vy=-RFU>0QhoHrlSUC|PDSf6S>sim1p^}*Vlw|_vPu$*<o1pMg=
z?6M~b{BcE?UO9$Y#*lRZShkfW-x!d#{|=*wZC3EeBG9y-G*tq`dg@=A?oc+w>7LYB
zG^hM>y)?PcFG+>i6&zaRerQEKUZ7C~j4<z_LuVa#)A)Rv<ANh%oZ71JAb2`@v58K0
z)ri0KceCqj!~n2PM1M{1JU5iI+fT#F_RPxB_8H`%#@Fx)AL*NCs*Q8~xjfdu6&r1|
zv91t+w;Y{zAPROR*y5q!_BwToyM|r~J%T8qY?bCutt^7Bec;KH=6#Fr<{gP`15WDf
z9y+!}HD&opPB%CjDV4j5C7TRCs(Ll3ZW?kPB)M<rPf1`0{|Fr307onDI+K&J9VH52
z4aGqP2?wL-FtgwtD*}JS%Mbvv6nC^p`M9jZ028NjY1GL-%n_iCo}~vOMyRbK5DkW6
zcH@PzsP&cJ(9?i_(`jSX>^G|~r*@3#@R`@s<d>I`YQ}$&vBN&K^+9p{E)}Hnkbj4X
zZ&rO-qn$&}!1v&A!0#RVWzjklCWr^ER*s{F_@&bndAHHngZqD!NlU)AQP-CP<91dD
zQw1lt!QZxrpIEiYkH7;SD)q8lJB~3?{DVZ<)vA-C@z@Dk`+SEtzwf2<n7xh!$ven<
zBGRE*^nW!gu#5K{1d&>Z4&2P7j!2A**5P!20$s5pLsKFYt1g2mw2_X7IET0Y|D0!x
zSCs<nEg99{8NGjd{6;$0xHHN$<d&2Qw=4>4n>u=wA*N;wUt1wD$nCgf#JMkCifG3k
z6rtFQ;Pb{gs=##+_G7)?Bel9h8kx7vy6)Qx$BLfPuRo+J`+<J66WC5m9gVX*lF(Dk
z6JUtq{8dNcu}jD^r<g@U!<1<ty=$kN;etBpu;Gy!Akcqm%xVSqB$77Qy_=OBsqk03
z3;`55zwrsiigy06X+No|+Rkebz^pY<JymKBTJ?R6B_=C9+b02&fvob77>L0clw~M~
zlPI_m4?nT(eU!|W#3t~bVXJou_zYA%CdN%=0;*o&8kG1;-sYzu6S%q7sJ3PX0LO-r
z#F<1UIMN7`N}SS;FcRpq4<a=J3SbSzQUwVIm^S0HP9!S=e^bg30LbDzLxq|IT)G?K
zmo?MpcYoEtEPQSZSJyb_5`^oL{*d|-8#~Qei>3!+utPWewQIiU`Hq%2^*Q{amZ`UG
zxlU@q)_^gOO(UEIrD2!J*{v<;+5FkdwvZ`-H-P|I>*(`@bTh7W6h@SOv-zD!?fx3i
zx{w*6_1OqRf5kO%_JD1eGS{$Tr1oT|2<w*A+z%pWi426Bviiwhj9T53h*bdOi}D}n
zQ%I`I9&~&9Rs#}^yun`|@ka}-N>Gl7f;nbhG%K5Ej7J`Utq4!Ek`%1DZ)F)J^sh7}
zn;ma*TG+!Q3Wi!kI;^~tH%MB})faohT^PE3WPt6ee^IprJ3YIZIP92Bp(GOGc?tEQ
z6l}M8DI#7ePm@kW372>N;{ny#j})Z-F|`8-58LsnpODncgXBduf4Pdo3zD*a@=bTS
z<mvqM=orEzV#d+<bY{?bt9GG<K3?eiOjl7pFd4K1@dwKDS#uv$5QfXX*JG>}-=jb+
z$PI{>e>p&8&IvFwTYL*k)Y31+5?X4<{U_JhhrhM&K7MM@$4vz;X<OjVhK&RJKaDff
z7NvzQ%3#0S$msCtW4rG|X6A4aK^vyorM193Q4VY1QSst!?0hMLvs4s$zY{#t^vA=1
oUT_0lyi9;*6E%L=z11+?uMF>dEvj>UGs#q52wD5OQ-XQzvvLA1^Z)<=

diff --git a/enterprise/audit/diff_internal_test.go b/enterprise/audit/diff_internal_test.go
index ef3fe9eab0..2dd9300ab4 100644
--- a/enterprise/audit/diff_internal_test.go
+++ b/enterprise/audit/diff_internal_test.go
@@ -317,7 +317,7 @@ func Test_diff(t *testing.T) {
 			},
 			exp: audit.Map{
 				"id":          audit.OldNew{Old: "", New: uuid.UUID{1}.String()},
-				"template_id": audit.OldNew{Old: "", New: uuid.UUID{2}.String()},
+				"template_id": audit.OldNew{Old: "null", New: uuid.UUID{2}.String()},
 				"created_by":  audit.OldNew{Old: "", New: uuid.UUID{4}.String()},
 				"name":        audit.OldNew{Old: "", New: "rust"},
 			},
@@ -386,7 +386,7 @@ func Test_diff(t *testing.T) {
 				"owner_id":           audit.OldNew{Old: "", New: uuid.UUID{2}.String()},
 				"template_id":        audit.OldNew{Old: "", New: uuid.UUID{3}.String()},
 				"name":               audit.OldNew{Old: "", New: "rust workspace"},
-				"autostart_schedule": audit.OldNew{Old: "", New: "0 12 * * 1-5"},
+				"autostart_schedule": audit.OldNew{Old: "null", New: "0 12 * * 1-5"},
 				"ttl":                audit.OldNew{Old: int64(0), New: int64(8 * time.Hour)}, // XXX: pq still does not support time.Duration
 			},
 		},
@@ -417,8 +417,8 @@ func runDiffTests(t *testing.T, tests []diffTest) {
 	t.Helper()
 
 	for _, test := range tests {
+		test := test
 		typName := reflect.TypeOf(test.left).Name()
-
 		t.Run(typName+"/"+test.name, func(t *testing.T) {
 			t.Parallel()
 			require.Equal(t,
diff --git a/enterprise/tailnet/coordinator.go b/enterprise/tailnet/coordinator.go
index 10605498df..99234d2a00 100644
--- a/enterprise/tailnet/coordinator.go
+++ b/enterprise/tailnet/coordinator.go
@@ -568,9 +568,9 @@ func (c *haCoordinator) handlePubsubMessage(ctx context.Context, message []byte)
 func (c *haCoordinator) formatCallMeMaybe(recipient uuid.UUID, nodes []*agpl.Node) ([]byte, error) {
 	buf := bytes.Buffer{}
 
-	buf.WriteString(c.id.String() + "|")
-	buf.WriteString("callmemaybe|")
-	buf.WriteString(recipient.String() + "|")
+	_, _ = buf.WriteString(c.id.String() + "|")
+	_, _ = buf.WriteString("callmemaybe|")
+	_, _ = buf.WriteString(recipient.String() + "|")
 	err := json.NewEncoder(&buf).Encode(nodes)
 	if err != nil {
 		return nil, xerrors.Errorf("encode node: %w", err)
@@ -583,9 +583,9 @@ func (c *haCoordinator) formatCallMeMaybe(recipient uuid.UUID, nodes []*agpl.Nod
 func (c *haCoordinator) formatAgentHello(id uuid.UUID) ([]byte, error) {
 	buf := bytes.Buffer{}
 
-	buf.WriteString(c.id.String() + "|")
-	buf.WriteString("agenthello|")
-	buf.WriteString(id.String() + "|")
+	_, _ = buf.WriteString(c.id.String() + "|")
+	_, _ = buf.WriteString("agenthello|")
+	_, _ = buf.WriteString(id.String() + "|")
 
 	return buf.Bytes(), nil
 }
@@ -594,9 +594,9 @@ func (c *haCoordinator) formatAgentHello(id uuid.UUID) ([]byte, error) {
 func (c *haCoordinator) formatClientHello(id uuid.UUID) ([]byte, error) {
 	buf := bytes.Buffer{}
 
-	buf.WriteString(c.id.String() + "|")
-	buf.WriteString("clienthello|")
-	buf.WriteString(id.String() + "|")
+	_, _ = buf.WriteString(c.id.String() + "|")
+	_, _ = buf.WriteString("clienthello|")
+	_, _ = buf.WriteString(id.String() + "|")
 
 	return buf.Bytes(), nil
 }
@@ -605,9 +605,9 @@ func (c *haCoordinator) formatClientHello(id uuid.UUID) ([]byte, error) {
 func (c *haCoordinator) formatAgentUpdate(id uuid.UUID, node *agpl.Node) ([]byte, error) {
 	buf := bytes.Buffer{}
 
-	buf.WriteString(c.id.String() + "|")
-	buf.WriteString("agentupdate|")
-	buf.WriteString(id.String() + "|")
+	_, _ = buf.WriteString(c.id.String() + "|")
+	_, _ = buf.WriteString("agentupdate|")
+	_, _ = buf.WriteString(id.String() + "|")
 	err := json.NewEncoder(&buf).Encode(node)
 	if err != nil {
 		return nil, xerrors.Errorf("encode node: %w", err)
@@ -622,8 +622,8 @@ func (c *haCoordinator) ServeHTTPDebug(w http.ResponseWriter, r *http.Request) {
 	c.mutex.RLock()
 	defer c.mutex.RUnlock()
 
-	fmt.Fprintln(w, "<h1>high-availability wireguard coordinator debug</h1>")
-	fmt.Fprintln(w, "<h4 style=\"margin-top:-25px\">warning: this only provides info from the node that served the request, if there are multiple replicas this data may be incomplete</h4>")
+	_, _ = fmt.Fprintln(w, "<h1>high-availability wireguard coordinator debug</h1>")
+	_, _ = fmt.Fprintln(w, "<h4 style=\"margin-top:-25px\">warning: this only provides info from the node that served the request, if there are multiple replicas this data may be incomplete</h4>")
 
 	agpl.CoordinatorHTTPDebug(c.agentSockets, c.agentToConnectionSockets, c.agentNameCache)(w, r)
 }
diff --git a/flake.nix b/flake.nix
index 881ee583c0..9817c6a6bc 100644
--- a/flake.nix
+++ b/flake.nix
@@ -24,7 +24,7 @@
             getopt
             git
             go-migrate
-            go_1_19
+            go_1_20
             golangci-lint
             gopls
             gotestsum
diff --git a/go.mod b/go.mod
index dead853462..15e14a9335 100644
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/coder/coder
 
-go 1.19
+go 1.20
 
 // Required until https://github.com/manifoldco/promptui/pull/169 is merged.
 replace github.com/manifoldco/promptui => github.com/kylecarbs/promptui v0.8.1-0.20201231190244-d8f2159af2b2
diff --git a/provisioner/terraform/safeenv.go b/provisioner/terraform/safeenv.go
index 0b3cedd714..4da2fc32cd 100644
--- a/provisioner/terraform/safeenv.go
+++ b/provisioner/terraform/safeenv.go
@@ -19,7 +19,7 @@ import (
 const unsafeEnvCanary = "CODER_DONT_PASS"
 
 func init() {
-	os.Setenv(unsafeEnvCanary, "true")
+	_ = os.Setenv(unsafeEnvCanary, "true")
 }
 
 func envName(env string) string {
diff --git a/scripts/apitypings/main.go b/scripts/apitypings/main.go
index 96b4398d0f..23f3e34ab6 100644
--- a/scripts/apitypings/main.go
+++ b/scripts/apitypings/main.go
@@ -37,7 +37,7 @@ func main() {
 	}
 
 	// Just cat the output to a file to capture it
-	fmt.Println(output)
+	_, _ = fmt.Println(output)
 }
 
 func Generate(directory string) (string, error) {
@@ -307,11 +307,11 @@ func (g *Generator) generateOne(m *Maps, obj types.Object) error {
 			var str strings.Builder
 			_, _ = str.WriteString(g.posLine(obj))
 			if ts.AboveTypeLine != "" {
-				str.WriteString(ts.AboveTypeLine)
-				str.WriteRune('\n')
+				_, _ = str.WriteString(ts.AboveTypeLine)
+				_, _ = str.WriteRune('\n')
 			}
 			// Use similar output syntax to enums.
-			str.WriteString(fmt.Sprintf("export type %s = %s\n", obj.Name(), ts.ValueType))
+			_, _ = str.WriteString(fmt.Sprintf("export type %s = %s\n", obj.Name(), ts.ValueType))
 			m.Structs[obj.Name()] = str.String()
 		case *types.Interface:
 			// Interfaces are used as generics. Non-generic interfaces are
@@ -353,7 +353,7 @@ func (g *Generator) generateOne(m *Maps, obj types.Object) error {
 	case *types.Func:
 		// Noop
 	default:
-		fmt.Println(obj.Name())
+		_, _ = fmt.Println(obj.Name())
 	}
 	return nil
 }
@@ -387,7 +387,7 @@ func (g *Generator) buildUnion(obj types.Object, st *types.Union) (string, error
 
 	allTypes = slice.Unique(allTypes)
 
-	s.WriteString(fmt.Sprintf("export type %s = %s\n", obj.Name(), strings.Join(allTypes, " | ")))
+	_, _ = s.WriteString(fmt.Sprintf("export type %s = %s\n", obj.Name(), strings.Join(allTypes, " | ")))
 
 	return s.String(), nil
 }
diff --git a/scripts/auditdocgen/main.go b/scripts/auditdocgen/main.go
index c51f0de695..378f50e984 100644
--- a/scripts/auditdocgen/main.go
+++ b/scripts/auditdocgen/main.go
@@ -110,11 +110,11 @@ func updateAuditDoc(doc []byte, auditableResourcesMap AuditableResourcesMap) ([]
 	tableEndIndex := tableStartIndex + j
 
 	var buffer bytes.Buffer
-	buffer.Write(doc[:tableStartIndex])
-	buffer.WriteByte('\n')
+	_, _ = buffer.Write(doc[:tableStartIndex])
+	_ = buffer.WriteByte('\n')
 
-	buffer.WriteString("|<b>Resource<b>||\n")
-	buffer.WriteString("|--|-----------------|\n")
+	_, _ = buffer.WriteString("|<b>Resource<b>||\n")
+	_, _ = buffer.WriteString("|--|-----------------|\n")
 
 	for _, resourceName := range sortedResourceNames {
 		readableResourceName := resourceName
@@ -131,21 +131,21 @@ func updateAuditDoc(doc []byte, auditableResourcesMap AuditableResourcesMap) ([]
 		}
 		auditActionsString := strings.Join(auditActions, ", ")
 
-		buffer.WriteString("|" + readableResourceName + "<br><i>" + auditActionsString + "</i>|<table><thead><tr><th>Field</th><th>Tracked</th></tr></thead><tbody>")
+		_, _ = buffer.WriteString("|" + readableResourceName + "<br><i>" + auditActionsString + "</i>|<table><thead><tr><th>Field</th><th>Tracked</th></tr></thead><tbody>")
 
 		// We must sort the field names to ensure sub-table ordering
 		sortedFieldNames := sortKeys(auditableResourcesMap[resourceName])
 
 		for _, fieldName := range sortedFieldNames {
 			isTracked := auditableResourcesMap[resourceName][fieldName]
-			buffer.WriteString("<tr><td>" + fieldName + "</td><td>" + strconv.FormatBool(isTracked) + "</td></tr>")
+			_, _ = buffer.WriteString("<tr><td>" + fieldName + "</td><td>" + strconv.FormatBool(isTracked) + "</td></tr>")
 		}
 
-		buffer.WriteString("</tbody></table>\n")
+		_, _ = buffer.WriteString("</tbody></table>\n")
 	}
 
-	buffer.WriteString("\n")
-	buffer.Write(doc[tableEndIndex:])
+	_, _ = buffer.WriteString("\n")
+	_, _ = buffer.Write(doc[tableEndIndex:])
 	return buffer.Bytes(), nil
 }
 
diff --git a/scripts/metricsdocgen/main.go b/scripts/metricsdocgen/main.go
index ee69cbf999..09fac07445 100644
--- a/scripts/metricsdocgen/main.go
+++ b/scripts/metricsdocgen/main.go
@@ -104,21 +104,21 @@ func updatePrometheusDoc(doc []byte, metricFamilies []dto.MetricFamily) ([]byte,
 	tableEndIndex := tableStartIndex + j
 
 	var buffer bytes.Buffer
-	buffer.Write(doc[:tableStartIndex])
-	buffer.WriteByte('\n')
+	_, _ = buffer.Write(doc[:tableStartIndex])
+	_ = buffer.WriteByte('\n')
 
-	buffer.WriteString("| Name | Type | Description | Labels |\n")
-	buffer.WriteString("| - | - | - | - |\n")
+	_, _ = buffer.WriteString("| Name | Type | Description | Labels |\n")
+	_, _ = buffer.WriteString("| - | - | - | - |\n")
 	for _, mf := range metricFamilies {
-		buffer.WriteString("| ")
-		buffer.Write([]byte("`" + *mf.Name + "`"))
-		buffer.WriteString(" | ")
-		buffer.Write([]byte(strings.ToLower(mf.Type.String())))
-		buffer.WriteString(" | ")
+		_, _ = buffer.WriteString("| ")
+		_, _ = buffer.Write([]byte("`" + *mf.Name + "`"))
+		_, _ = buffer.WriteString(" | ")
+		_, _ = buffer.Write([]byte(strings.ToLower(mf.Type.String())))
+		_, _ = buffer.WriteString(" | ")
 		if mf.Help != nil {
-			buffer.Write([]byte(*mf.Help))
+			_, _ = buffer.Write([]byte(*mf.Help))
 		}
-		buffer.WriteString(" | ")
+		_, _ = buffer.WriteString(" | ")
 
 		labels := map[string]struct{}{}
 		metrics := mf.GetMetric()
@@ -129,14 +129,14 @@ func updatePrometheusDoc(doc []byte, metricFamilies []dto.MetricFamily) ([]byte,
 		}
 
 		if len(labels) > 0 {
-			buffer.WriteString(strings.Join(sortedKeys(labels), " "))
+			_, _ = buffer.WriteString(strings.Join(sortedKeys(labels), " "))
 		}
 
-		buffer.WriteString(" |\n")
+		_, _ = buffer.WriteString(" |\n")
 	}
 
-	buffer.WriteByte('\n')
-	buffer.Write(doc[tableEndIndex:])
+	_ = buffer.WriteByte('\n')
+	_, _ = buffer.Write(doc[tableEndIndex:])
 	return buffer.Bytes(), nil
 }
 
diff --git a/tailnet/coordinator.go b/tailnet/coordinator.go
index f1e6d664b8..37d08f12ce 100644
--- a/tailnet/coordinator.go
+++ b/tailnet/coordinator.go
@@ -456,7 +456,7 @@ func (c *coordinator) ServeHTTPDebug(w http.ResponseWriter, r *http.Request) {
 	c.mutex.RLock()
 	defer c.mutex.RUnlock()
 
-	fmt.Fprintln(w, "<h1>in-memory wireguard coordinator debug</h1>")
+	_, _ = fmt.Fprintln(w, "<h1>in-memory wireguard coordinator debug</h1>")
 
 	CoordinatorHTTPDebug(c.agentSockets, c.agentToConnectionSockets, c.agentNameCache)(w, r)
 }
@@ -475,8 +475,8 @@ func CoordinatorHTTPDebug(
 		}
 
 		{
-			fmt.Fprintf(w, "<h2 id=agents><a href=#agents>#</a> agents: total %d</h2>\n", len(agentSocketsMap))
-			fmt.Fprintln(w, "<ul>")
+			_, _ = fmt.Fprintf(w, "<h2 id=agents><a href=#agents>#</a> agents: total %d</h2>\n", len(agentSocketsMap))
+			_, _ = fmt.Fprintln(w, "<ul>")
 			agentSockets := make([]idConn, 0, len(agentSocketsMap))
 
 			for id, conn := range agentSocketsMap {
@@ -488,7 +488,7 @@ func CoordinatorHTTPDebug(
 			})
 
 			for _, agent := range agentSockets {
-				fmt.Fprintf(w, "<li style=\"margin-top:4px\"><b>%s</b> (<code>%s</code>): created %v ago, write %v ago, overwrites %d </li>\n",
+				_, _ = fmt.Fprintf(w, "<li style=\"margin-top:4px\"><b>%s</b> (<code>%s</code>): created %v ago, write %v ago, overwrites %d </li>\n",
 					agent.conn.Name,
 					agent.id.String(),
 					now.Sub(time.Unix(agent.conn.Start, 0)).Round(time.Second),
@@ -497,7 +497,7 @@ func CoordinatorHTTPDebug(
 				)
 
 				if conns := agentToConnectionSocketsMap[agent.id]; len(conns) > 0 {
-					fmt.Fprintf(w, "<h3 style=\"margin:0px;font-size:16px;font-weight:400\">connections: total %d</h3>\n", len(conns))
+					_, _ = fmt.Fprintf(w, "<h3 style=\"margin:0px;font-size:16px;font-weight:400\">connections: total %d</h3>\n", len(conns))
 
 					connSockets := make([]idConn, 0, len(conns))
 					for id, conn := range conns {
@@ -507,20 +507,20 @@ func CoordinatorHTTPDebug(
 						return a.id.String() < b.id.String()
 					})
 
-					fmt.Fprintln(w, "<ul>")
+					_, _ = fmt.Fprintln(w, "<ul>")
 					for _, connSocket := range connSockets {
-						fmt.Fprintf(w, "<li><b>%s</b> (<code>%s</code>): created %v ago, write %v ago </li>\n",
+						_, _ = fmt.Fprintf(w, "<li><b>%s</b> (<code>%s</code>): created %v ago, write %v ago </li>\n",
 							connSocket.conn.Name,
 							connSocket.id.String(),
 							now.Sub(time.Unix(connSocket.conn.Start, 0)).Round(time.Second),
 							now.Sub(time.Unix(connSocket.conn.LastWrite, 0)).Round(time.Second),
 						)
 					}
-					fmt.Fprintln(w, "</ul>")
+					_, _ = fmt.Fprintln(w, "</ul>")
 				}
 			}
 
-			fmt.Fprintln(w, "</ul>")
+			_, _ = fmt.Fprintln(w, "</ul>")
 		}
 
 		{
@@ -551,8 +551,8 @@ func CoordinatorHTTPDebug(
 				return a.id.String() < b.id.String()
 			})
 
-			fmt.Fprintf(w, "<h2 id=missing-agents><a href=#missing-agents>#</a> missing agents: total %d</h2>\n", len(missingAgents))
-			fmt.Fprintln(w, "<ul>")
+			_, _ = fmt.Fprintf(w, "<h2 id=missing-agents><a href=#missing-agents>#</a> missing agents: total %d</h2>\n", len(missingAgents))
+			_, _ = fmt.Fprintln(w, "<ul>")
 
 			for _, agentConns := range missingAgents {
 				agentName, ok := agentNameCache.Get(agentConns.id)
@@ -560,24 +560,24 @@ func CoordinatorHTTPDebug(
 					agentName = "unknown"
 				}
 
-				fmt.Fprintf(w, "<li style=\"margin-top:4px\"><b>%s</b> (<code>%s</code>): created ? ago, write ? ago, overwrites ? </li>\n",
+				_, _ = fmt.Fprintf(w, "<li style=\"margin-top:4px\"><b>%s</b> (<code>%s</code>): created ? ago, write ? ago, overwrites ? </li>\n",
 					agentName,
 					agentConns.id.String(),
 				)
 
-				fmt.Fprintf(w, "<h3 style=\"margin:0px;font-size:16px;font-weight:400\">connections: total %d</h3>\n", len(agentConns.conns))
-				fmt.Fprintln(w, "<ul>")
+				_, _ = fmt.Fprintf(w, "<h3 style=\"margin:0px;font-size:16px;font-weight:400\">connections: total %d</h3>\n", len(agentConns.conns))
+				_, _ = fmt.Fprintln(w, "<ul>")
 				for _, agentConn := range agentConns.conns {
-					fmt.Fprintf(w, "<li><b>%s</b> (<code>%s</code>): created %v ago, write %v ago </li>\n",
+					_, _ = fmt.Fprintf(w, "<li><b>%s</b> (<code>%s</code>): created %v ago, write %v ago </li>\n",
 						agentConn.conn.Name,
 						agentConn.id.String(),
 						now.Sub(time.Unix(agentConn.conn.Start, 0)).Round(time.Second),
 						now.Sub(time.Unix(agentConn.conn.LastWrite, 0)).Round(time.Second),
 					)
 				}
-				fmt.Fprintln(w, "</ul>")
+				_, _ = fmt.Fprintln(w, "</ul>")
 			}
-			fmt.Fprintln(w, "</ul>")
+			_, _ = fmt.Fprintln(w, "</ul>")
 		}
 	}
 }
diff --git a/testutil/eventually.go b/testutil/eventually.go
index 8b8b3f41ac..e0b0737fe9 100644
--- a/testutil/eventually.go
+++ b/testutil/eventually.go
@@ -30,11 +30,11 @@ func Eventually(ctx context.Context, t testing.TB, condition func(ctx context.Co
 
 	msg := "Eventually timed out"
 	if len(msgAndArgs) > 0 {
-		if m, ok := msgAndArgs[0].(string); ok {
-			msg = fmt.Sprintf(m, msgAndArgs[1:]...)
-		} else {
+		m, ok := msgAndArgs[0].(string)
+		if !ok {
 			panic("developer error: first argument of msgAndArgs must be a string")
 		}
+		msg = fmt.Sprintf(m, msgAndArgs[1:]...)
 	}
 
 	ticker := time.NewTicker(tick)