From 7ccc93cec54975d5b680783a2b8b39ee10d10872 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 17 Aug 2025 17:18:15 +0000 Subject: [PATCH] [chore] : Bump the actions group across 1 directory with 7 updates Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `3.5.2` | `4.2.2` | | [actions/setup-go](https://github.com/actions/setup-go) | `4.0.0` | `5.5.0` | | [actions/cache](https://github.com/actions/cache) | `4.2.3` | `4.2.4` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4.3.3` | `4.6.2` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `3.4.0` | `8.0.0` | | [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) | `1.26.1` | `1.50.0` | | [bufbuild/buf-lint-action](https://github.com/bufbuild/buf-lint-action) | `1.0.3` | `1.1.1` | Updates `actions/checkout` from 3.5.2 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/8e5e7e5ab8b370d6c329ec480221332ada57f0ab...11bd71901bbe5b1630ceea73d27597364c9af683) Updates `actions/setup-go` from 4.0.0 to 5.5.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/4d34df0c2316fe8122ab82dc22947d607c0c91f9...d35c59abb061a4a6fb18e82ac0862c26744d6ab5) Updates `actions/cache` from 4.2.3 to 4.2.4 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/5a3ec84eff668545956fd18022155c47e93e2684...0400d5f644dc74513175e3cd8d07132dd4860809) Updates `actions/upload-artifact` from 4.3.3 to 4.6.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/65462800fd760344b1a7b4382951275a0abb4808...ea165f8d65b6e75b540449e92b4886f43607fa02) Updates `golangci/golangci-lint-action` from 3.4.0 to 8.0.0 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](https://github.com/golangci/golangci-lint-action/compare/08e2f20817b15149a52b5b3ebe7de50aff2ba8c5...4afd733a84b1f43292c63897423277bb7f4313a9) Updates `bufbuild/buf-setup-action` from 1.26.1 to 1.50.0 - [Release notes](https://github.com/bufbuild/buf-setup-action/releases) - [Commits](https://github.com/bufbuild/buf-setup-action/compare/eb60cd0de4f14f1f57cf346916b8cd69a9e7ed0b...a47c93e0b1648d5651a065437926377d060baa99) Updates `bufbuild/buf-lint-action` from 1.0.3 to 1.1.1 - [Release notes](https://github.com/bufbuild/buf-lint-action/releases) - [Commits](https://github.com/bufbuild/buf-lint-action/compare/bd48f53224baaaf0fc55de9a913e7680ca6dbea4...06f9dd823d873146471cfaaf108a993fe00e5325) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 4.2.2 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-go dependency-version: 5.5.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/cache dependency-version: 4.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: actions/upload-artifact dependency-version: 4.6.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: golangci/golangci-lint-action dependency-version: 8.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: bufbuild/buf-setup-action dependency-version: 1.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: bufbuild/buf-lint-action dependency-version: 1.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/checks.yaml | 20 ++++++++++---------- .github/workflows/two-step-pr-approval.yaml | 2 +- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/workflows/checks.yaml b/.github/workflows/checks.yaml index 2b19517..3fc2bb6 100644 --- a/.github/workflows/checks.yaml +++ b/.github/workflows/checks.yaml @@ -18,10 +18,10 @@ jobs: runs-on: ubuntu-latest steps: - name: "Fetch source code" - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Install Go toolchain - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: ${{ env.GO_VERSION }} @@ -29,7 +29,7 @@ jobs: # identical across the unit-tests, e2e-tests, and consistency-checks # jobs, or else weird things could happen. - name: Cache Go modules - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 + uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 with: path: "~/go/pkg" key: go-mod-${{ hashFiles('go.sum') }} @@ -41,7 +41,7 @@ jobs: go test -v ./... -coverprofile=coverage.out - name: Upload Coverage report - uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 + uses: actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02 with: path: coverage.out name: Coverage-report @@ -55,10 +55,10 @@ jobs: steps: - name: "Fetch source code" - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Install Go toolchain - uses: actions/setup-go@4d34df0c2316fe8122ab82dc22947d607c0c91f9 # v4.0.0 + uses: actions/setup-go@d35c59abb061a4a6fb18e82ac0862c26744d6ab5 # v5.5.0 with: go-version: ${{ env.GO_VERSION }} @@ -66,7 +66,7 @@ jobs: # identical across the unit-tests and consistency-checks # jobs, or else weird things could happen. - name: Cache Go modules - uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3 + uses: actions/cache@0400d5f644dc74513175e3cd8d07132dd4860809 # v4.2.4 with: path: "~/go/pkg" key: go-mod-${{ hashFiles('go.sum') }} @@ -82,7 +82,7 @@ jobs: fi - name: Run golangci-lint - uses: golangci/golangci-lint-action@08e2f20817b15149a52b5b3ebe7de50aff2ba8c5 # v3.4.0 + uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0 # protobuf linting - - uses: bufbuild/buf-setup-action@eb60cd0de4f14f1f57cf346916b8cd69a9e7ed0b # v1.26.1 - - uses: bufbuild/buf-lint-action@bd48f53224baaaf0fc55de9a913e7680ca6dbea4 # v1.0.3 + - uses: bufbuild/buf-setup-action@a47c93e0b1648d5651a065437926377d060baa99 # v1.50.0 + - uses: bufbuild/buf-lint-action@06f9dd823d873146471cfaaf108a993fe00e5325 # v1.1.1 diff --git a/.github/workflows/two-step-pr-approval.yaml b/.github/workflows/two-step-pr-approval.yaml index 1609351..95756a6 100644 --- a/.github/workflows/two-step-pr-approval.yaml +++ b/.github/workflows/two-step-pr-approval.yaml @@ -14,7 +14,7 @@ jobs: contents: write steps: - name: Checkout code - uses: actions/checkout@8e5e7e5ab8b370d6c329ec480221332ada57f0ab # v3.5.2 + uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 - name: Two stage PR review uses: hashicorp/two-stage-pr-approval@v0.1.0