Skip to content

feat: bump the actions group across 1 directory with 9 updates #4

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

feat: bump the actions group across 1 directory with 9 updates #4

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
36 changes: 18 additions & 18 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -28,16 +28,16 @@ jobs:
name: lint
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@v7

- uses: actions/setup-go@v6
- uses: actions/setup-go@v7
with:
go-version-file: go.mod

# The linter set and its settings are pinned in .golangci.yml; only the
# binary version is decided here. golangci-lint v2 is required — the config
# file declares `version: "2"`.
- uses: golangci/golangci-lint-action@v8
- uses: golangci/golangci-lint-action@v9
with:
version: v2.12.2

Expand All @@ -57,9 +57,9 @@ jobs:
- ubuntu-latest
- macos-latest
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@v7

- uses: actions/setup-go@v6
- uses: actions/setup-go@v7
with:
go-version-file: go.mod

Expand All @@ -77,9 +77,9 @@ jobs:
name: examples
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@v7

- uses: actions/setup-go@v6
- uses: actions/setup-go@v7
with:
go-version-file: go.mod

Expand All @@ -96,9 +96,9 @@ jobs:
# Makefile, so give the job enough room to report rather than be killed.
timeout-minutes: 30
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@v7

- uses: actions/setup-go@v6
- uses: actions/setup-go@v7
with:
go-version-file: go.mod

Expand All @@ -124,9 +124,9 @@ jobs:
name: security
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@v7

- uses: actions/setup-go@v6
- uses: actions/setup-go@v7
with:
go-version-file: go.mod

Expand Down Expand Up @@ -187,11 +187,11 @@ jobs:
&& !startsWith(github.head_ref, 'release/')
&& !contains(github.event.pull_request.labels.*.name, 'skip-changelog')
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@v7
with:
fetch-depth: 0

- uses: miniscruff/changie-action@v2
- uses: miniscruff/changie-action@v3
with:
version: latest
args: --version
Expand Down Expand Up @@ -227,11 +227,11 @@ jobs:
# The trunk variant builds six targets and three images.
timeout-minutes: 30
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@v7
with:
fetch-depth: 0

- uses: actions/setup-go@v6
- uses: actions/setup-go@v7
with:
go-version-file: go.mod

Expand All @@ -244,7 +244,7 @@ jobs:
# (see the comment on it in .goreleaser.yaml), so the verdict is taken from
# the message instead: "configuration is valid" is the pass condition, and
# anything else — a bad key, a broken template — still fails the job.
- uses: goreleaser/goreleaser-action@v6
- uses: goreleaser/goreleaser-action@v7
with:
version: '~> v2'
install-only: true
Expand Down Expand Up @@ -274,10 +274,10 @@ jobs:
# Dockerfile target that no longer exists — both of which would only
# surface during a real release. Slower, and it belongs here rather than on
# every PR.
- uses: docker/setup-qemu-action@v3
- uses: docker/setup-qemu-action@v4
if: github.event_name == 'push'

- uses: docker/setup-buildx-action@v3
- uses: docker/setup-buildx-action@v4
if: github.event_name == 'push'

- name: goreleaser release --snapshot (trunk)
Expand Down
6 changes: 3 additions & 3 deletions .github/workflows/release-pr.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,19 +45,19 @@ jobs:
# pushed as the bot too: a branch pushed with GITHUB_TOKEN does not trigger
# workflows, and neither does a PR opened with it — the release PR would
# then sit there with no CI on the very commit that gets tagged.
- uses: actions/create-github-app-token@v2
- uses: actions/create-github-app-token@v3
id: app-token
with:
app-id: ${{ secrets.GH_APP_ID }}
private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
owner: ${{ github.repository_owner }}

- uses: actions/checkout@v5
- uses: actions/checkout@v7
with:
fetch-depth: 0
token: ${{ steps.app-token.outputs.token }}

- uses: miniscruff/changie-action@v2
- uses: miniscruff/changie-action@v3
with:
version: latest
args: --version
Expand Down
16 changes: 8 additions & 8 deletions .github/workflows/release.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -43,25 +43,25 @@ jobs:
# so a misconfigured release stops before the tag exists. An earlier revision
# let goreleaser skip the Homebrew upload with a warning nobody reads, and
# v1.0.0 shipped with no formula in the tap.
- uses: actions/create-github-app-token@v2
- uses: actions/create-github-app-token@v3
id: app-token
with:
app-id: ${{ secrets.GH_APP_ID }}
private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
owner: ${{ github.repository_owner }}

- uses: actions/checkout@v5
- uses: actions/checkout@v7
with:
fetch-depth: 0
# So the tag below is pushed by the bot, matching the author it is
# stamped with and the identity that publishes everything downstream.
token: ${{ steps.app-token.outputs.token }}

- uses: actions/setup-go@v6
- uses: actions/setup-go@v7
with:
go-version-file: go.mod

- uses: miniscruff/changie-action@v2
- uses: miniscruff/changie-action@v3
with:
version: latest
args: --version
Expand Down Expand Up @@ -114,13 +114,13 @@ jobs:
git push origin "$VERSION"

# goreleaser reads the multi-arch images out of this builder.
- uses: docker/setup-qemu-action@v3
- uses: docker/setup-qemu-action@v4
if: steps.version.outputs.skip == 'false'

- uses: docker/setup-buildx-action@v3
- uses: docker/setup-buildx-action@v4
if: steps.version.outputs.skip == 'false'

- uses: docker/login-action@v3
- uses: docker/login-action@v4
if: steps.version.outputs.skip == 'false'
with:
registry: ghcr.io
Expand All @@ -129,7 +129,7 @@ jobs:

- name: goreleaser release
if: steps.version.outputs.skip == 'false'
uses: goreleaser/goreleaser-action@v6
uses: goreleaser/goreleaser-action@v7
with:
version: '~> v2'
args: release --clean --release-notes .changes/${{ steps.version.outputs.version }}.md
Expand Down
Loading