Merge pull request #26 from github/updates

Update Go Modules

Author: GrantBirki

.github/dependabot.yml

@@ -1,68 +1,29 @@
----
 version: 2
 
-registries:
-  ghcr:
-    type: "docker-registry"
-    url: "ghcr.io"
-    username: "PAT"
-    password: "${{secrets.CONTAINER_BUILDER_TOKEN}}"
-  rubygems-github-packages:
-    type: "rubygems-server"
-    url: "rubygems.pkg.github.com/github"
-    token: "${{secrets.CONTAINER_BUILDER_TOKEN}}"
-
 updates:
-  - package-ecosystem: "bundler"
-    vendor: true
+  - package-ecosystem: gomod
     directory: "/"
-    registries: ["rubygems-github-packages"]
-    groups:
-      ruby-gems-production:
-        dependency-type: "production"
-        patterns: ["*"]
-      dev-ruby-development:
-        dependency-type: "development"
-        patterns: ["*"]
     schedule:
-      interval: "weekly"
-    reviewers: ["github/sae-reviewers"]
-
-  - package-ecosystem: "docker"
-    directory: "/"
-    registries: ["ghcr"]
+      interval: monthly
     groups:
-      container-images:
-        patterns: ["*"]
-    schedule:
-      interval: "weekly"
-    reviewers: ["github/sae-reviewers"]
+      go-dependencies:
+        patterns:
+          - "*"
 
-  - package-ecosystem: "github-actions"
+  - package-ecosystem: docker
     directory: "/"
-    groups:
-      github-actions:
-        patterns: ["*"]
-    ignore:
-      - dependency-name: "github/internal-actions"
     schedule:
-      interval: "weekly"
-    reviewers: ["github/sae-reviewers"]
-
-  - package-ecosystem: "pip"
-    directory: "/"
-    schedule:
-      interval: "weekly"
+      interval: monthly
     groups:
-      python-packages:
-        patterns: ["*"]
-    reviewers: ["github/sae-reviewers"]
+      docker-dependencies:
+        patterns:
+          - "*"
 
-  - package-ecosystem: "gomod"
+  - package-ecosystem: github-actions
     directory: "/"
-    schedule:
-      interval: "weekly"
     groups:
-      go-packages:
-        patterns: ["*"]
-    reviewers: ["github/sae-reviewers"]
+      github-actions:
+        patterns:
+          - "*"
+    schedule:
+      interval: monthly

actionsoidc/actions-oidc.go

@@ -9,7 +9,7 @@ import (
 	"net/url"
 	"os"
 
-	"github.com/golang-jwt/jwt"
+	"github.com/golang-jwt/jwt/v5"
 )
 
 type ActionsOIDCClient struct {

go.mod

@@ -2,4 +2,4 @@ module github.com/github/actions-oidc-debugger
 
 go 1.18
 
-require github.com/golang-jwt/jwt v3.2.2+incompatible
+require github.com/golang-jwt/jwt/v5 v5.2.2

go.sum

@@ -1,2 +1,2 @@
-github.com/golang-jwt/jwt v3.2.2+incompatible h1:IfV12K8xAKAnZqdXVzCZ+TOjboZ2keLg81eXfW3O+oY=
-github.com/golang-jwt/jwt v3.2.2+incompatible/go.mod h1:8pz2t5EyA70fFQQSrl6XZXzqecmYZeUEB8OUGHkxJ+I=
+github.com/golang-jwt/jwt/v5 v5.2.2 h1:Rl4B7itRWVtYIHFrSNd7vhTiz9UpLdi6gZhZ3wEeDy8=
+github.com/golang-jwt/jwt/v5 v5.2.2/go.mod h1:pqrtFR0X4osieyHYxtmOUWsAWrfe1Q5UVIyoH402zdk=