Bump Golang 1.11.3 (CVE-2018-16875)

[thaJeztah]

go1.11.13 (released 2018/12/14)

• crypto/x509: CPU denial of service in chain validation crypto/x509: CPU denial of service in chain validation golang/go#29233
• cmd/go: directory traversal in "go get" via curly braces in import paths cmd/go: directory traversal in "go get" via curly braces in import paths golang/go#29231
• cmd/go: remote command execution during "go get -u" cmd/go: remote command execution during "go get -u" golang/go#29230

See the Go 1.11.3 milestone on the issue tracker for details:
https://github.com/golang/go/issues?q=milestone%3AGo1.11.3

[vdemeester]

LGTM 🍵

[thaJeztah]

Looks like the golang image isn't multi-arch yet; only x86_64

docker manifest inspect golang:1.11.3
{
   "schemaVersion": 2,
   "mediaType": "application/vnd.docker.distribution.manifest.list.v2+json",
   "manifests": [
      {
         "mediaType": "application/vnd.docker.distribution.manifest.v2+json",
         "size": 1796,
         "digest": "sha256:e03ed489934627bed040325b9796fc1c3e2428ac8de762ad9c985952be95db07",
         "platform": {
            "architecture": "amd64",
            "os": "linux"
         }
      }
   ]
}

[thaJeztah]

Opened an issue docker-library/golang#253

[thaJeztah]

Windows images also seem to be missing; docker-library/golang#254

[thaJeztah]

Images are up now, so restarted CI again

[thaJeztah]

Merging; Windows RS5 failure is unrelated