Skip to content
This repository was archived by the owner on Dec 16, 2025. It is now read-only.

Commit f4d36b4

Browse files
cluster-stack-bot[bot]cluster-stack-bot[bot]
authored
🌱 Update github-actions group
| datasource | package | from | to | | --------------- | ------------------------- | ------- | ------- | | github-tags | actions/setup-go | v5.3.0 | v5.5.0 | | github-tags | docker/build-push-action | v6.13.0 | v6.18.0 | | github-tags | docker/login-action | v3.3.0 | v3.5.0 | | github-tags | docker/metadata-action | v5.6.1 | v5.8.0 | | github-releases | actions/go-versions | 1.22.12 | 1.24.6 | | github-tags | sigstore/cosign-installer | v3.7.0 | v3.9.2 |
1 parent f23bdb5 commit f4d36b4

File tree

7 files changed

+23
-23
lines changed

7 files changed

+23
-23
lines changed

‎.github/actions/metadata/action.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ runs:
2222
steps:
2323
- name: Docker manager metadata
2424
id: meta
25-
uses: docker/metadata-action@369eb591f429131d6889c46b94e711f089e6ca96 # v5.6.1
25+
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
2626
with:
2727
images: ${{ env.REGISTRY }}/${{ env.IMAGE_NAME }}
2828
flavor: ${{ inputs.metadata_flavor }}

‎.github/actions/setup-go/action.yaml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -4,9 +4,9 @@ runs:
44
using: "composite"
55
steps:
66
- name: Install go
7-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
7+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
88
with:
9-
go-version: "1.22"
9+
go-version: "1.24"
1010
go-version-file: "go.mod"
1111
cache: true
1212
cache-dependency-path: go.sum
@@ -16,14 +16,14 @@ runs:
1616
echo "go-build=$(go env GOCACHE)" >> $GITHUB_OUTPUT
1717
echo "go-mod=$(go env GOMODCACHE)" >> $GITHUB_OUTPUT
1818
- name: Go Mod Cache
19-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
19+
uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
2020
with:
2121
path: ${{ steps.go-cache-paths.outputs.go-mod }}
2222
key: ${{ runner.os }}-go-mod-${{ hashFiles('**/go.sum') }}
2323
restore-keys: |
2424
${{ runner.os }}-go-mod-
2525
- name: Go Build Cache
26-
uses: actions/cache@1bd1e32a3bdc45362d1e726936510720a7c30a57 # v4
26+
uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4
2727
with:
2828
path: ${{ steps.go-cache-paths.outputs.go-build }}
2929
key: ${{ runner.os }}-go-build-${{ hashFiles('**/go.sum') }}

‎.github/workflows/build.yaml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -35,9 +35,9 @@ jobs:
3535
uses: ./.github/actions/setup-go
3636

3737
- name: Set up QEMU
38-
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
38+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
3939
- name: Set up Docker Buildx
40-
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
40+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
4141

4242
- name: Generate metadata cspo
4343
id: metacspo
@@ -49,14 +49,14 @@ jobs:
4949
metadata_tags: ${{ env.metadata_tags }}
5050

5151
- name: Login to ghcr.io for CI
52-
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
52+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
5353
with:
5454
registry: ghcr.io
5555
username: ${{ github.actor }}
5656
password: ${{ secrets.GITHUB_TOKEN }}
5757

5858
- name: Install Cosign
59-
uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
59+
uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
6060

6161
- name: Install Bom
6262
shell: bash
@@ -91,7 +91,7 @@ jobs:
9191
9292
# Import GitHub's cache build to docker cache
9393
- name: Copy cspo Golang cache to docker cache
94-
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6.13.0
94+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
9595
with:
9696
provenance: false
9797
context: /tmp/.cache/cspo
@@ -101,7 +101,7 @@ jobs:
101101
target: import-cache
102102

103103
- name: Build and push cspo image
104-
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6
104+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
105105
id: docker_build_release_cspo
106106
with:
107107
provenance: false
@@ -154,7 +154,7 @@ jobs:
154154
# Store docker's golang's cache build locally only on the main branch
155155
- name: Store cspo Golang cache build locally
156156
if: ${{ steps.cache.outputs.cache-hit != 'true' }}
157-
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6.13.0
157+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6.18.0
158158
with:
159159
provenance: false
160160
context: .

‎.github/workflows/pr-verify.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
- name: Verify Starlark
3030
run: make verify-starlark
3131

32-
- uses: actions/setup-node@1d0ff469b7ec7b3cb9d8673fde0c81c44821de2a # v4
32+
- uses: actions/setup-node@49933ea5288caeca8642d1e84afbd3f7d6820020 # v4
3333
with:
3434
node-version: "18"
3535
- name: Install renovate
@@ -42,7 +42,7 @@ jobs:
4242
done
4343
4444
- name: Generate Token
45-
uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1
45+
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
4646
id: generate-token
4747
with:
4848
app-id: ${{ secrets.SCS_APP_ID }}

‎.github/workflows/release.yaml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -23,9 +23,9 @@ jobs:
2323
fetch-depth: 0
2424
- uses: ./.github/actions/setup-go
2525
- name: Set up QEMU
26-
uses: docker/setup-qemu-action@53851d14592bedcffcf25ea515637cff71ef929a # v3
26+
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3
2727
- name: Set up Docker Buildx
28-
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
28+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
2929

3030
- name: Generate metadata cspo
3131
id: metacspo
@@ -37,14 +37,14 @@ jobs:
3737
metadata_tags: ${{ env.metadata_tags }}
3838

3939
- name: Login to ghcr.io for CI
40-
uses: docker/login-action@9780b0c442fbb1117ed29e0efdff1e18412f7567 # v3.3.0
40+
uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3.5.0
4141
with:
4242
registry: ghcr.io
4343
username: ${{ github.actor }}
4444
password: ${{ secrets.GITHUB_TOKEN }}
4545

4646
- name: Install Cosign
47-
uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0
47+
uses: sigstore/cosign-installer@d58896d6a1865668819e1d91763c7751a165e159 # v3.9.2
4848

4949
- name: Install Bom
5050
shell: bash
@@ -60,7 +60,7 @@ jobs:
6060
echo 'EOF' >> $GITHUB_ENV
6161
6262
- name: Build and push cspo image
63-
uses: docker/build-push-action@ca877d9245402d1537745e0e356eab47c3520991 # v6
63+
uses: docker/build-push-action@263435318d21b8e681c14492fe198d362a7d2c83 # v6
6464
id: docker_build_release_cspo
6565
with:
6666
provenance: false
@@ -154,7 +154,7 @@ jobs:
154154
make release-notes
155155
156156
- name: Release
157-
uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2
157+
uses: softprops/action-gh-release@72f2c25fcb47643c292f7107632f7a47c1df5cd8 # v2
158158
with:
159159
draft: true
160160
files: out/*

‎.github/workflows/report-bin-size.yaml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16,7 +16,7 @@ jobs:
1616
run: git config --global --add safe.directory "$GITHUB_WORKSPACE"
1717

1818
- name: Install go
19-
uses: actions/setup-go@f111f3307d8850f501ac008e886eec1fd1932a34 # v5.3.0
19+
uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0
2020
with:
2121
go-version-file: "go.mod"
2222
cache: true

‎.github/workflows/schedule-update-bot.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -35,10 +35,10 @@ jobs:
3535
# qemu is not required as of now because we don't build images for arm64
3636
# use docker/setup-qemu-action@v3 if you want to have arm64 images.
3737
- name: Set up Docker Buildx # required for building image
38-
uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3
38+
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3
3939

4040
- name: Generate Token
41-
uses: actions/create-github-app-token@c1a285145b9d317df6ced56c09f525b5c2b6f755 # v1
41+
uses: actions/create-github-app-token@d72941d797fd3113feb6b93fd0dec494b13a2547 # v1
4242
id: generate-token
4343
with:
4444
app-id: ${{ secrets.SCS_APP_ID }}

0 commit comments

Comments
 (0)