From 0f6a99a4d794576dff1761cfc2a945174aa01535 Mon Sep 17 00:00:00 2001 From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com> Date: Fri, 21 Aug 2026 16:38:34 +0000 Subject: [PATCH] chore(deps): update github actions --- .github/workflows/ci.yml | 4 ++-- .github/workflows/codeql.yml | 6 +++--- .github/workflows/docs.yml | 2 +- .github/workflows/release.yml | 14 +++++++------- .github/workflows/renovate.yml | 4 ++-- .github/workflows/security.yml | 8 ++++---- 6 files changed, 19 insertions(+), 19 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 0fecfdc..e85e50e 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -20,7 +20,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Set up Go uses: actions/setup-go@v7.0.0 @@ -90,7 +90,7 @@ jobs: SONAR_HOST_URL: https://sonarcloud.io steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 54800d1..68d2134 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -20,10 +20,10 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Initialize CodeQL - uses: github/codeql-action/init@v4.37.1 + uses: github/codeql-action/init@v4.37.8 with: languages: go @@ -39,4 +39,4 @@ jobs: go build ./... - name: Perform CodeQL analysis - uses: github/codeql-action/analyze@v4.37.1 + uses: github/codeql-action/analyze@v4.37.8 diff --git a/.github/workflows/docs.yml b/.github/workflows/docs.yml index a308e81..d358cea 100644 --- a/.github/workflows/docs.yml +++ b/.github/workflows/docs.yml @@ -29,7 +29,7 @@ jobs: DOCS_SITE_URL: https://docs.servestead.com steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Set up Node uses: actions/setup-node@v7.0.0 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index a827b55..c4607f4 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -37,7 +37,7 @@ jobs: fi - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: fetch-depth: 0 ref: ${{ steps.release.outputs.tag }} @@ -70,7 +70,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Attest binary checksums - uses: actions/attest-build-provenance@v4.1.1 + uses: actions/attest-build-provenance@v4.2.2 with: subject-checksums: dist/checksums.txt @@ -94,7 +94,7 @@ jobs: echo "name=ghcr.io/${owner}/servestead" >> "$GITHUB_OUTPUT" - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 with: ref: ${{ steps.release.outputs.tag }} @@ -102,10 +102,10 @@ jobs: uses: docker/setup-qemu-action@v4.2.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4.2.0 + uses: docker/setup-buildx-action@v4.3.0 - name: Log in to GHCR - uses: docker/login-action@v4.4.0 + uses: docker/login-action@v4.6.0 with: registry: ghcr.io username: ${{ github.actor }} @@ -132,7 +132,7 @@ jobs: org.opencontainers.image.version=${{ steps.release.outputs.tag }} - name: Attest image - uses: actions/attest-build-provenance@v4.1.1 + uses: actions/attest-build-provenance@v4.2.2 with: subject-name: ${{ steps.image.outputs.name }} subject-digest: ${{ steps.build.outputs.digest }} @@ -150,7 +150,7 @@ jobs: version: ${{ env.TRIVY_VERSION }} - name: Upload image SARIF - uses: github/codeql-action/upload-sarif@v4.37.1 + uses: github/codeql-action/upload-sarif@v4.37.8 with: sarif_file: trivy-image.sarif diff --git a/.github/workflows/renovate.yml b/.github/workflows/renovate.yml index 97b9f57..5a14ee2 100644 --- a/.github/workflows/renovate.yml +++ b/.github/workflows/renovate.yml @@ -15,7 +15,7 @@ jobs: if: github.repository == 'enddzone/servestead' steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Require Renovate token env: @@ -23,7 +23,7 @@ jobs: run: test -n "$RENOVATE_TOKEN" - name: Run Renovate - uses: renovatebot/github-action@v46.1.19 + uses: renovatebot/github-action@v46.2.2 with: configurationFile: renovate.json token: ${{ secrets.RENOVATE_TOKEN }} diff --git a/.github/workflows/security.yml b/.github/workflows/security.yml index 4ac95cb..5070b22 100644 --- a/.github/workflows/security.yml +++ b/.github/workflows/security.yml @@ -25,7 +25,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Set up Go uses: actions/setup-go@v7.0.0 @@ -50,7 +50,7 @@ jobs: if: github.event_name == 'pull_request' steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Review dependency changes uses: actions/dependency-review-action@v5.0.0 @@ -64,7 +64,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@v7.0.0 + uses: actions/checkout@v7.0.1 - name: Generate SARIF report uses: aquasecurity/trivy-action@v0.36.0 @@ -78,7 +78,7 @@ jobs: version: ${{ env.TRIVY_VERSION }} - name: Upload SARIF - uses: github/codeql-action/upload-sarif@v4.37.1 + uses: github/codeql-action/upload-sarif@v4.37.8 with: sarif_file: trivy-results.sarif