From 6c34697173e0a816716c689dea1eb9bd25535fe1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 15 Jul 2026 23:14:56 +0000 Subject: [PATCH] chore(deps): bump the github-actions-all group across 1 directory with 10 updates Bumps the github-actions-all group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `2` | `7` | | [magnetikonline/action-golang-cache](https://github.com/magnetikonline/action-golang-cache) | `4` | `5` | | [wagoid/commitlint-github-action](https://github.com/wagoid/commitlint-github-action) | `2` | `6` | | [google-github-actions/auth](https://github.com/google-github-actions/auth) | `0` | `3` | | [google-github-actions/setup-gcloud](https://github.com/google-github-actions/setup-gcloud) | `0` | `3` | | [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `4` | `6` | | [fjogeleit/http-request-action](https://github.com/fjogeleit/http-request-action) | `1` | `2` | | [actions/setup-node](https://github.com/actions/setup-node) | `3.7.0` | `7.0.0` | | [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` | | [pnpm/action-setup](https://github.com/pnpm/action-setup) | `4` | `6` | Updates `actions/checkout` from 2 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v2...v7) Updates `magnetikonline/action-golang-cache` from 4 to 5 - [Release notes](https://github.com/magnetikonline/action-golang-cache/releases) - [Commits](https://github.com/magnetikonline/action-golang-cache/compare/v4...v5) Updates `wagoid/commitlint-github-action` from 2 to 6 - [Changelog](https://github.com/wagoid/commitlint-github-action/blob/master/CHANGELOG.md) - [Commits](https://github.com/wagoid/commitlint-github-action/compare/v2...v6) Updates `google-github-actions/auth` from 0 to 3 - [Release notes](https://github.com/google-github-actions/auth/releases) - [Changelog](https://github.com/google-github-actions/auth/blob/main/CHANGELOG.md) - [Commits](https://github.com/google-github-actions/auth/compare/v0...v3) Updates `google-github-actions/setup-gcloud` from 0 to 3 - [Release notes](https://github.com/google-github-actions/setup-gcloud/releases) - [Changelog](https://github.com/google-github-actions/setup-gcloud/blob/main/CHANGELOG.md) - [Commits](https://github.com/google-github-actions/setup-gcloud/compare/v0...v3) Updates `aws-actions/configure-aws-credentials` from 4 to 6 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/v4...v6) Updates `fjogeleit/http-request-action` from 1 to 2 - [Release notes](https://github.com/fjogeleit/http-request-action/releases) - [Changelog](https://github.com/fjogeleit/http-request-action/blob/main/RELEASE.md) - [Commits](https://github.com/fjogeleit/http-request-action/compare/v1...v2) Updates `actions/setup-node` from 3.7.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v3.7.0...v7) Updates `actions/setup-go` from 5 to 6 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v5...v6) Updates `pnpm/action-setup` from 4 to 6 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/v4...v6) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: actions/setup-go dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: actions/setup-node dependency-version: 6.4.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: aws-actions/configure-aws-credentials dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: fjogeleit/http-request-action dependency-version: '2' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: google-github-actions/auth dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: google-github-actions/setup-gcloud dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: magnetikonline/action-golang-cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: pnpm/action-setup dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all - dependency-name: wagoid/commitlint-github-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions-all ... Signed-off-by: dependabot[bot] --- .github/workflows/ci-test.yml | 4 ++-- .github/workflows/commitlint.yml | 4 ++-- .github/workflows/gke-dev.yml | 6 +++--- .github/workflows/gke-prod.yml | 6 +++--- .github/workflows/release.yaml | 4 ++-- .github/workflows/security.yml | 12 ++++++------ 6 files changed, 18 insertions(+), 18 deletions(-) mode change 100755 => 100644 .github/workflows/commitlint.yml mode change 100755 => 100644 .github/workflows/gke-dev.yml mode change 100755 => 100644 .github/workflows/gke-prod.yml diff --git a/.github/workflows/ci-test.yml b/.github/workflows/ci-test.yml index 46810bd7b..c48c8bf25 100644 --- a/.github/workflows/ci-test.yml +++ b/.github/workflows/ci-test.yml @@ -52,9 +52,9 @@ jobs: name: CI testing steps: - - uses: actions/checkout@v3 + - uses: actions/checkout@v7 - name: Setup Golang with cache - uses: magnetikonline/action-golang-cache@v4 + uses: magnetikonline/action-golang-cache@v5 with: # Pin a modern Go toolchain instead of go.mod's `go 1.19`: modern build tools # (sql-migrate) now ship go.mod directives (`go 1.24.0`) that Go 1.19 cannot parse. diff --git a/.github/workflows/commitlint.yml b/.github/workflows/commitlint.yml old mode 100755 new mode 100644 index 83916796e..b41191470 --- a/.github/workflows/commitlint.yml +++ b/.github/workflows/commitlint.yml @@ -5,7 +5,7 @@ jobs: commitlint: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v2 + - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: wagoid/commitlint-github-action@v2 \ No newline at end of file + - uses: wagoid/commitlint-github-action@v6 \ No newline at end of file diff --git a/.github/workflows/gke-dev.yml b/.github/workflows/gke-dev.yml old mode 100755 new mode 100644 index 1a653803a..36523a493 --- a/.github/workflows/gke-dev.yml +++ b/.github/workflows/gke-dev.yml @@ -19,16 +19,16 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v7 - id: "auth" name: "Authenticate to Google Cloud" - uses: "google-github-actions/auth@v0" + uses: "google-github-actions/auth@v3" with: credentials_json: "${{ secrets.GCP_CREDENTIALS }}" - name: "Set up Cloud SDK" - uses: "google-github-actions/setup-gcloud@v0" + uses: "google-github-actions/setup-gcloud@v3" - name: Setup Docker run: | diff --git a/.github/workflows/gke-prod.yml b/.github/workflows/gke-prod.yml old mode 100755 new mode 100644 index e1dd348e7..5d90311e9 --- a/.github/workflows/gke-prod.yml +++ b/.github/workflows/gke-prod.yml @@ -21,10 +21,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v3 + uses: actions/checkout@v7 - name: Configure AWS credentials - uses: aws-actions/configure-aws-credentials@v4 + uses: aws-actions/configure-aws-credentials@v6 with: aws-access-key-id: ${{ secrets.AWS_ACCESS_KEY_ID }} aws-secret-access-key: ${{ secrets.AWS_SECRET_ACCESS_KEY }} @@ -66,7 +66,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Notify changelog - uses: fjogeleit/http-request-action@v1 + uses: fjogeleit/http-request-action@v2 with: url: 'https://chglg.fly.dev/v1/changelog' method: 'POST' diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 5a4d4b25c..5c25aa081 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -19,11 +19,11 @@ jobs: name: release runs-on: ubuntu-latest steps: - - uses: actions/checkout@v3 # v3 + - uses: actions/checkout@v7 # v3 with: fetch-depth: 0 # to be able to checkout any commit persist-credentials: false # <--- this - - uses: actions/setup-node@e33196f7422957bea03ed53f6fbb155025ffc7b8 # v3 + - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v3 with: cache: npm node-version: lts/* diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index d0485daf4..1b640a515 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -9,7 +9,7 @@ jobs: gitleaks: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 with: fetch-depth: 0 - name: gitleaks (release binary, no license) @@ -21,8 +21,8 @@ jobs: govulncheck: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: actions/setup-go@v5 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v6 with: go-version: stable - name: govulncheck (advisory, non-blocking) @@ -35,11 +35,11 @@ jobs: audit: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 - - uses: pnpm/action-setup@v4 + - uses: actions/checkout@v7 + - uses: pnpm/action-setup@v6 with: version: 9 - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v7.0.0 with: node-version: 20 - name: dependency audit (advisory, non-blocking)