From e87e446427bee1cd2143cd019f92098e9e7c17ac Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Mon, 2 Nov 2026 05:08:36 +0000 Subject: [PATCH] chore(deps): update github actions --- .github/workflows/ci.yml | 10 +++++----- .github/workflows/codeql.yml | 6 +++--- .github/workflows/docs.yml | 6 +++--- .github/workflows/release.yml | 20 ++++++++++---------- .github/workflows/renovate.yml | 4 ++-- .github/workflows/security.yml | 8 ++++---- 6 files changed, 27 insertions(+), 27 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index c060e5d..5eae1c3 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Set up Go uses: actions/setup-go@v7.0.0 @@ -61,7 +61,7 @@ jobs: run: go test -covermode=atomic -coverprofile=coverage.out ./... - name: Upload coverage - uses: actions/upload-artifact@v7.0.1 + uses: actions/upload-artifact@v7.0.2 with: name: go-coverage path: coverage.out @@ -77,12 +77,12 @@ jobs: SONAR_HOST_URL: https://sonarcloud.io steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 - name: Download coverage - uses: actions/download-artifact@v8.0.1 + uses: actions/download-artifact@v8.0.2 with: name: go-coverage @@ -90,7 +90,7 @@ jobs: run: test -n "$SONAR_TOKEN" - name: Scan with SonarQube Cloud - uses: SonarSource/sonarqube-scan-action@v8.2.1 + uses: SonarSource/sonarqube-scan-action@v8.4.0 with: args: > -Dsonar.qualitygate.wait=true diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 6ef6a2a..3db66ee 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -20,10 +20,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.1 + uses: github/codeql-action/init@v4.39.1 with: languages: go @@ -37,4 +37,4 @@ jobs: run: go build ./... - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@v4.37.1 + uses: github/codeql-action/analyze@v4.39.1 diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index a308e81..66b6df0 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -29,10 +29,10 @@ jobs: DOCS_SITE_URL: https://docs.servestead.com steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Set up Node - uses: actions/setup-node@v7.0.0 + uses: actions/setup-node@v7.1.0 with: node-version: 24 cache: npm @@ -66,4 +66,4 @@ jobs: steps: - name: Deploy to GitHub Pages id: deployment - uses: actions/deploy-pages@v5.0.0 + uses: actions/deploy-pages@v5.0.1 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 932d335..6871e88 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -37,7 +37,7 @@ jobs: fi - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 ref: ${{ steps.release.outputs.tag }} @@ -56,7 +56,7 @@ jobs: syft version - name: Run GoReleaser - uses: goreleaser/goreleaser-action@v7.2.3 + uses: goreleaser/goreleaser-action@v7.3.0 with: version: ${{ env.GORELEASER_VERSION }} args: release --clean @@ -64,7 +64,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Attest binary checksums - uses: actions/attest-build-provenance@v4.1.1 + uses: actions/attest-build-provenance@v4.2.2 with: subject-checksums: dist/checksums.txt @@ -88,18 +88,18 @@ jobs: echo "name=ghcr.io/${owner}/servestead" >> "$GITHUB_OUTPUT" - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: ref: ${{ steps.release.outputs.tag }} - name: Set up QEMU - uses: docker/setup-qemu-action@v4.2.0 + uses: docker/setup-qemu-action@v4.4.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4.2.0 + uses: docker/setup-buildx-action@v4.4.1 - name: Log in to GHCR - uses: docker/login-action@v4.4.0 + uses: docker/login-action@v4.7.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -107,7 +107,7 @@ jobs: - name: Build and push image id: build - uses: docker/build-push-action@v7.3.0 + uses: docker/build-push-action@v7.4.0 with: context: . file: Dockerfile.release @@ -126,7 +126,7 @@ jobs: org.opencontainers.image.version=${{ steps.release.outputs.tag }} - name: Attest image - uses: actions/attest-build-provenance@v4.1.1 + uses: actions/attest-build-provenance@v4.2.2 with: subject-name: ${{ steps.image.outputs.name }} subject-digest: ${{ steps.build.outputs.digest }} @@ -144,7 +144,7 @@ jobs: version: ${{ env.TRIVY_VERSION }} - name: Upload image SARIF - uses: github/codeql-action/upload-sarif@v4.37.1 + uses: github/codeql-action/upload-sarif@v4.39.1 with: sarif_file: trivy-image.sarif diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 97b9f57..d69e86a 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -15,7 +15,7 @@ jobs: if: github.repository == 'enddzone/servestead' steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Require Renovate token env: @@ -23,7 +23,7 @@ jobs: run: test -n "$RENOVATE_TOKEN" - name: Run Renovate - uses: renovatebot/github-action@v46.1.19 + uses: renovatebot/github-action@v46.3.12 with: configurationFile: renovate.json token: ${{ secrets.RENOVATE_TOKEN }} diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index a3f8394..fa22451 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -25,7 +25,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Set up Go uses: actions/setup-go@v7.0.0 @@ -45,7 +45,7 @@ jobs: if: github.event_name == 'pull_request' steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Review dependency changes uses: actions/dependency-review-action@v5.0.0 @@ -59,7 +59,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Generate SARIF report uses: aquasecurity/trivy-action@v0.36.0 @@ -73,7 +73,7 @@ jobs: version: ${{ env.TRIVY_VERSION }} - name: Upload SARIF - uses: github/codeql-action/upload-sarif@v4.37.1 + uses: github/codeql-action/upload-sarif@v4.39.1 with: sarif_file: trivy-results.sarif