From 1946bdad11f9335287cb22c3a1754edbd5e22600 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 26 Feb 2026 01:56:54 +0000 Subject: [PATCH] chore(deps): Bump the development-dependencies group with 2 updates Bumps the development-dependencies group with 2 updates: [go-openapi/gh-actions](https://github.com/go-openapi/gh-actions) and [taiki-e/install-action](https://github.com/taiki-e/install-action). Updates `go-openapi/gh-actions` from 1.4.6 to 1.4.7 - [Release notes](https://github.com/go-openapi/gh-actions/releases) - [Changelog](https://github.com/go-openapi/gh-actions/blob/master/release_tracker.go) - [Commits](https://github.com/go-openapi/gh-actions/compare/f94d1f200adab8d24b37584e5f61795a6062421d...23cdaeff454807ac293a6e98cff552a2ea49be63) Updates `taiki-e/install-action` from 2.68.9 to 2.68.11 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/7f491e26f71f4ec2e6902c7c95c73043f209ab79...d9c7e4de96b8ff27364cd0b5890e9280b99adbb3) --- updated-dependencies: - dependency-name: go-openapi/gh-actions dependency-version: 1.4.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: taiki-e/install-action dependency-version: 2.68.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-merge.yml | 2 +- .github/workflows/bump-release-monorepo.yml | 6 +++--- .github/workflows/bump-release.yml | 4 ++-- .github/workflows/collect-reports.yml | 4 ++-- .github/workflows/contributors.yml | 4 ++-- .github/workflows/go-test-monorepo.yml | 6 +++--- .github/workflows/go-test.yml | 2 +- .github/workflows/prepare-release-monorepo.yml | 6 +++--- .github/workflows/release.yml | 4 ++-- 9 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml index 21c44ea..00c7c4b 100644 --- a/.github/workflows/auto-merge.yml +++ b/.github/workflows/auto-merge.yml @@ -133,7 +133,7 @@ jobs: run: gh pr review --approve "$PR_URL" - name: Wait for all workflow runs to complete - uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 with: pr-url: ${{ env.PR_URL }} github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/bump-release-monorepo.yml b/.github/workflows/bump-release-monorepo.yml index 4d9afe6..61833f1 100644 --- a/.github/workflows/bump-release-monorepo.yml +++ b/.github/workflows/bump-release-monorepo.yml @@ -136,7 +136,7 @@ jobs: - name: Detect go mono-repo id: detect-monorepo - uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 bump-release-single: name: Bump release (single module) @@ -195,7 +195,7 @@ jobs: - name: Determine next tag id: bump-release - uses: go-openapi/gh-actions/ci-jobs/next-tag@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/next-tag@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 with: bump-patch: ${{ steps.bump-check.outputs.bump-patch }} bump-minor: ${{ steps.bump-check.outputs.bump-minor }} @@ -307,7 +307,7 @@ jobs: - name: Configure bot credentials if: ${{ inputs.enable-tag-signing == 'true' }} - uses: go-openapi/gh-actions/ci-jobs/bot-credentials@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 # This is using the GPG signature of bot-go-openapi. # # For go-openapi repos (using secrets: inherit): diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml index 73ee2cf..6c172ad 100644 --- a/.github/workflows/bump-release.yml +++ b/.github/workflows/bump-release.yml @@ -114,7 +114,7 @@ jobs: - name: Determine next tag id: bump-release - uses: go-openapi/gh-actions/ci-jobs/next-tag@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/next-tag@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 with: bump-patch: ${{ steps.bump-check.outputs.bump-patch }} bump-minor: ${{ steps.bump-check.outputs.bump-minor }} @@ -122,7 +122,7 @@ jobs: - name: Configure bot credentials if: ${{ inputs.enable-tag-signing == 'true' }} - uses: go-openapi/gh-actions/ci-jobs/bot-credentials@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 # This is using the GPG signature of bot-go-openapi. # # For go-openapi repos (using secrets: inherit): diff --git a/.github/workflows/collect-reports.yml b/.github/workflows/collect-reports.yml index cbb4b37..d6172ef 100644 --- a/.github/workflows/collect-reports.yml +++ b/.github/workflows/collect-reports.yml @@ -32,7 +32,7 @@ jobs: path: reports/ - name: Install go-junit-report - uses: go-openapi/gh-actions/install/go-junit-report@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/install/go-junit-report@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 - name: Convert test reports to a merged JUnit XML # NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics. @@ -57,7 +57,7 @@ jobs: verbose: true - name: Install go-ctrf-json-reporter - uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 - name: Convert test reports to CTRF JSON # description: | diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml index ee29ab4..c0ca513 100644 --- a/.github/workflows/contributors.yml +++ b/.github/workflows/contributors.yml @@ -80,7 +80,7 @@ jobs: rm -rf contributors.json mv contributors.md CONTRIBUTORS.md - name: Configure bot credentials - uses: go-openapi/gh-actions/ci-jobs/bot-credentials@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 id: bot-credentials # For go-openapi repos (using secrets: inherit): # Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc. @@ -145,7 +145,7 @@ jobs: - name: Auto-approve PR run: gh pr review --approve "$PR_URL" - name: Wait for all workflow runs to complete - uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 with: pr-url: ${{ env.PR_URL }} github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/go-test-monorepo.yml b/.github/workflows/go-test-monorepo.yml index 8030681..8713727 100644 --- a/.github/workflows/go-test-monorepo.yml +++ b/.github/workflows/go-test-monorepo.yml @@ -42,7 +42,7 @@ jobs: - name: Detect go mono-repo id: detect-monorepo - uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 - name: golangci-lint [monorepo] # golangci-action v9.1+ has an experimental built-in mono repo detection setup. @@ -111,10 +111,10 @@ jobs: - name: Detect go version capabilities id: detect-go-version - uses: go-openapi/gh-actions/ci-jobs/detect-go-version@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/detect-go-version@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 - name: Install gotestsum - uses: go-openapi/gh-actions/install/gotestsum@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/install/gotestsum@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 - name: Ensure TMP is created on windows runners # On windows, some tests require testing.TempDir to reside on the same drive as the code. diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml index f1e1e91..c658d33 100644 --- a/.github/workflows/go-test.yml +++ b/.github/workflows/go-test.yml @@ -58,7 +58,7 @@ jobs: cache: true - name: Install gotestsum - uses: go-openapi/gh-actions/install/gotestsum@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/install/gotestsum@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 - name: Ensure TMP is created on windows runners # On windows, some tests require testing.TempDir to reside on the same drive as the code. diff --git a/.github/workflows/prepare-release-monorepo.yml b/.github/workflows/prepare-release-monorepo.yml index 02026ec..1dcc4f6 100644 --- a/.github/workflows/prepare-release-monorepo.yml +++ b/.github/workflows/prepare-release-monorepo.yml @@ -108,7 +108,7 @@ jobs: cache-dependency-path: "**/go.sum" - name: Detect go mono-repo id: detect-monorepo - uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 - name: Update go.mod files for new release env: TARGET_TAG: ${{ inputs.target-tag }} @@ -178,7 +178,7 @@ jobs: echo "::notice title=changes::Git status after updates" git status --short - name: Configure bot credentials - uses: go-openapi/gh-actions/ci-jobs/bot-credentials@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 id: bot-credentials # For go-openapi repos (using secrets: inherit): # Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc. @@ -261,7 +261,7 @@ jobs: run: gh pr review --approve "$PR_URL" - name: Wait for all workflow runs to complete if: ${{ needs.prepare-modules.outputs.pull-request-url != '' }} - uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 with: pr-url: ${{ env.PR_URL }} github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index bf99dc7..d047da5 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -89,11 +89,11 @@ jobs: name: Detect go mono-repo if: ${{ inputs.is-monorepo == 'true' }} id: detect-monorepo - uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@f94d1f200adab8d24b37584e5f61795a6062421d # v1.4.6 + uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7 - name: Install git-cliff [monorepo] if: ${{ inputs.is-monorepo == 'true' }} - uses: taiki-e/install-action@7f491e26f71f4ec2e6902c7c95c73043f209ab79 # v2.68.9 + uses: taiki-e/install-action@d9c7e4de96b8ff27364cd0b5890e9280b99adbb3 # v2.68.11 with: tool: git-cliff -