From 4af117130b4ab487dbcf971fa8fdb0eca28dce41 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 15 Dec 2025 01:20:56 +0000 Subject: [PATCH] chore(deps): Bump the development-dependencies group with 6 updates Bumps the development-dependencies group with 6 updates: | Package | From | To | | --- | --- | --- | | [github/codeql-action](https://github.com/github/codeql-action) | `4.31.7` | `4.31.8` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `6.0.0` | `7.0.0` | | [actions/cache](https://github.com/actions/cache) | `5.0.0` | `5.0.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `5.0.0` | `6.0.0` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `9.1.0` | `9.2.0` | | [orhun/git-cliff-action](https://github.com/orhun/git-cliff-action) | `4.6.0` | `4.7.0` | Updates `github/codeql-action` from 4.31.7 to 4.31.8 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/cf1bb45a277cb3c205638b2cd5c984db1c46a412...1b168cd39490f61582a9beae412bb7057a6b2c4e) Updates `actions/download-artifact` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/018cc2cf5baa6db3ef3c5f8a56943fffe632ef53...37930b1c2abaa49bbe596cd826c3c89aef350131) Updates `actions/cache` from 5.0.0 to 5.0.1 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/a7833574556fa59680c1b7cb190c1735db73ebf0...9255dc7a253b0ccc959486e2bca901246202afeb) Updates `actions/upload-artifact` from 5.0.0 to 6.0.0 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/330a01c490aca151604b8cf639adc76d48f6c5d4...b7c566a772e6b6bfb58ed0dc250532a479d7789f) Updates `golangci/golangci-lint-action` from 9.1.0 to 9.2.0 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](https://github.com/golangci/golangci-lint-action/compare/v9.1.0...1e7e51e771db61008b38414a730f564565cf7c20) Updates `orhun/git-cliff-action` from 4.6.0 to 4.7.0 - [Release notes](https://github.com/orhun/git-cliff-action/releases) - [Commits](https://github.com/orhun/git-cliff-action/compare/d77b37db2e3f7398432d34b72a12aa3e2ba87e51...e16f179f0be49ecdfe63753837f20b9531642772) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.31.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: actions/download-artifact dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: actions/cache dependency-version: 5.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: actions/upload-artifact dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: development-dependencies - dependency-name: golangci/golangci-lint-action dependency-version: 9.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: orhun/git-cliff-action dependency-version: 4.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 4 ++-- .github/workflows/collect-coverage.yml | 2 +- .github/workflows/collect-reports.yml | 2 +- .github/workflows/fuzz-test.yml | 4 ++-- .github/workflows/go-test-monorepo.yml | 6 +++--- .github/workflows/go-test.yml | 4 ++-- .github/workflows/release.yml | 4 ++-- .github/workflows/scanner.yml | 4 ++-- 8 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 8a55d85..eb0666c 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -26,9 +26,9 @@ jobs: - # Initializes the CodeQL tools for scanning. name: Initialize CodeQL - uses: github/codeql-action/init@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/init@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 with: languages: ${{ matrix.language }} - name: Analyze ${{ matrix.language }} - uses: github/codeql-action/analyze@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/analyze@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 diff --git a/.github/workflows/collect-coverage.yml b/.github/workflows/collect-coverage.yml index 4c37bd9..b00ede2 100644 --- a/.github/workflows/collect-coverage.yml +++ b/.github/workflows/collect-coverage.yml @@ -22,7 +22,7 @@ jobs: repository: ${{ github.event.pull_request.head.repo.full_name }} - name: Download coverage artifacts - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: run-id: "${{ github.run_id }}" pattern: "*.coverage.*" diff --git a/.github/workflows/collect-reports.yml b/.github/workflows/collect-reports.yml index 3c70e2a..591ca49 100644 --- a/.github/workflows/collect-reports.yml +++ b/.github/workflows/collect-reports.yml @@ -24,7 +24,7 @@ jobs: steps: - name: Download test report artifacts - uses: actions/download-artifact@018cc2cf5baa6db3ef3c5f8a56943fffe632ef53 # v6.0.0 + uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0 with: run-id: "${{ github.run_id }}" pattern: "*.report.*" diff --git a/.github/workflows/fuzz-test.yml b/.github/workflows/fuzz-test.yml index 7be8c2b..454956c 100644 --- a/.github/workflows/fuzz-test.yml +++ b/.github/workflows/fuzz-test.yml @@ -75,7 +75,7 @@ jobs: echo "CORPUS_DIR=${GOCACHE}/fuzz" >> "${GITHUB_ENV}" - name: Retrieve fuzz corpus from cache - uses: actions/cache@a7833574556fa59680c1b7cb190c1735db73ebf0 # v5.0.0 + uses: actions/cache@9255dc7a253b0ccc959486e2bca901246202afeb # v5.0.1 with: key: ${{ runner.os }}-go-fuzz path: @@ -144,7 +144,7 @@ jobs: - name: Upload failed corpus if: ${{ failure() }} - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 # TODO(fredbi): ideally, after uploading, we should fire a pull request to add # this corpus to testdata. with: diff --git a/.github/workflows/go-test-monorepo.yml b/.github/workflows/go-test-monorepo.yml index 1640953..b393aca 100644 --- a/.github/workflows/go-test-monorepo.yml +++ b/.github/workflows/go-test-monorepo.yml @@ -45,7 +45,7 @@ jobs: name: golangci-lint [mono-repo] # golangci-action v9.1+ has an experimental built-in mono repo detection setup. if: ${{ steps.detect-monorepo.outputs.is_monorepo == 'true' }} - uses: golangci/golangci-lint-action@e7fa5ac41e1cf5b7d48e45e42232ce7ada589601 # v9.1.0 + uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0 with: version: latest skip-cache: true @@ -178,7 +178,7 @@ jobs: ./... - name: Upload coverage artifacts - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: # *.coverage.* pattern is automatically detected by codecov path: '**/*.coverage.*.out' @@ -188,7 +188,7 @@ jobs: name: Upload test report artifacts # upload report even if tests fail. BTW, this is when they are valuable. if: ${{ !cancelled() }} - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: path: '**/unit.report.*.json' name: 'unit.report.${{ matrix.os }}-${{ matrix.go }}' diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml index 1e11d6c..1ed30a3 100644 --- a/.github/workflows/go-test.yml +++ b/.github/workflows/go-test.yml @@ -70,7 +70,7 @@ jobs: ./... - name: Upload coverage artifacts - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: # *.coverage.* pattern is automatically detected by codecov path: '**/*.coverage.*.out' @@ -80,7 +80,7 @@ jobs: name: Upload test report artifacts # upload report even if test fail. BTW, this is when they are valuable. if: ${{ !cancelled() }} - uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0 + uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0 with: path: '**/unit.report.*.json' name: 'unit.report.${{ matrix.os }}-${{ matrix.go }}' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e3bd101..aadbbd4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -77,7 +77,7 @@ jobs: env: GITHUB_TOKEN: ${{ github.token }} GITHUB_REPO: ${{ github.repository }} - uses: orhun/git-cliff-action@d77b37db2e3f7398432d34b72a12aa3e2ba87e51 # v4.6.0 + uses: orhun/git-cliff-action@e16f179f0be49ecdfe63753837f20b9531642772 # v4.7.0 with: config: ${{ inputs.cliff-config }} args: >- @@ -91,7 +91,7 @@ jobs: env: GITHUB_TOKEN: ${{ github.token }} GITHUB_REPO: ${{ github.repository }} - uses: orhun/git-cliff-action@d77b37db2e3f7398432d34b72a12aa3e2ba87e51 # v4.6.0 + uses: orhun/git-cliff-action@e16f179f0be49ecdfe63753837f20b9531642772 # v4.7.0 with: config: '' args: >- diff --git a/.github/workflows/scanner.yml b/.github/workflows/scanner.yml index 57b5a0a..f5cb3a6 100644 --- a/.github/workflows/scanner.yml +++ b/.github/workflows/scanner.yml @@ -49,7 +49,7 @@ jobs: exit-code: 0 - name: Upload trivy findings to code scanning dashboard - uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 with: category: trivy sarif_file: trivy-code-report.sarif @@ -69,7 +69,7 @@ jobs: output-file: govulnscan-report.sarif - name: Upload govulnscan findings to code scanning dashboard - uses: github/codeql-action/upload-sarif@cf1bb45a277cb3c205638b2cd5c984db1c46a412 # v4.31.7 + uses: github/codeql-action/upload-sarif@1b168cd39490f61582a9beae412bb7057a6b2c4e # v4.31.8 with: category: govulnscan sarif_file: govulnscan-report.sarif