From 21c5525eb7685c758f124261acfd623774c1de50 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 20 Jul 2026 18:54:55 +0000 Subject: [PATCH] build(deps): bump the github-actions group across 1 directory with 6 updates Bumps the github-actions group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6` | `7` | | [chainguard-dev/actions/nodiff](https://github.com/chainguard-dev/actions) | `1.6.11` | `1.6.28` | | [codecov/codecov-action](https://github.com/codecov/codecov-action) | `6.0.0` | `7.0.0` | | [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) | `3.0.1` | `4.0.0` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.35.0` | `0.36.0` | | [webiny/action-conventional-commits](https://github.com/webiny/action-conventional-commits) | `1.3.1` | `1.4.2` | Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `chainguard-dev/actions/nodiff` from 1.6.11 to 1.6.28 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/8bb24c24be6871bee44f19be55ea11e3b2aea3dd...fabe4ed3f66ceb5f8ec86ed7ae6d0c945ca362fb) Updates `codecov/codecov-action` from 6.0.0 to 7.0.0 - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/codecov/codecov-action/compare/v6.0.0...v7.0.0) Updates `slackapi/slack-github-action` from 3.0.1 to 4.0.0 - [Release notes](https://github.com/slackapi/slack-github-action/releases) - [Changelog](https://github.com/slackapi/slack-github-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/slackapi/slack-github-action/compare/af78098f536edbc4de71162a307590698245be95...dcb1066f776dd043e64d0e8ba94ca15cc7e1875d) Updates `aquasecurity/trivy-action` from 0.35.0 to 0.36.0 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/57a97c7e7821a5776cebc9bb87c984fa69cba8f1...ed142fd0673e97e23eac54620cfb913e5ce36c25) Updates `webiny/action-conventional-commits` from 1.3.1 to 1.4.2 - [Release notes](https://github.com/webiny/action-conventional-commits/releases) - [Commits](https://github.com/webiny/action-conventional-commits/compare/v1.3.1...v1.4.2) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: aquasecurity/trivy-action dependency-version: 0.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: chainguard-dev/actions/nodiff dependency-version: 1.6.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: codecov/codecov-action dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: slackapi/slack-github-action dependency-version: 3.0.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions - dependency-name: webiny/action-conventional-commits dependency-version: 1.4.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/build-test.yaml | 14 +++++++------- .github/workflows/docs.yaml | 6 +++--- .github/workflows/lint.yaml | 16 ++++++++-------- .github/workflows/release-windows.yml | 4 ++-- .github/workflows/release.yaml | 8 ++++---- 5 files changed, 24 insertions(+), 24 deletions(-) diff --git a/.github/workflows/build-test.yaml b/.github/workflows/build-test.yaml index 28de88a2..a8e8960f 100644 --- a/.github/workflows/build-test.yaml +++ b/.github/workflows/build-test.yaml @@ -15,7 +15,7 @@ jobs: name: "Build Binary" runs-on: "depot-ubuntu-latest-arm" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/setup-go@main" - uses: "authzed/actions/go-build@main" @@ -23,18 +23,18 @@ jobs: name: "Build Container Image" runs-on: "depot-ubuntu-latest-arm" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/docker-build@main" ensure-docs-uptodate: name: "Ensure Docs are up to date" runs-on: "depot-ubuntu-latest-arm" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/setup-go@main" - name: "Generate docs" run: "go run mage.go gen:docs" - - uses: "chainguard-dev/actions/nodiff@8bb24c24be6871bee44f19be55ea11e3b2aea3dd" # main + - uses: "chainguard-dev/actions/nodiff@fabe4ed3f66ceb5f8ec86ed7ae6d0c945ca362fb" # main with: path: "" fixup-command: "mage gen:docs" @@ -47,12 +47,12 @@ jobs: os: ["depot-ubuntu-latest-arm"] # TODO(miparnisari): add "windows-latest" after fixing the tests steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/setup-go@main" - name: "Unit tests with coverage" run: "go run mage.go test:runWithCoverage" - name: "Upload coverage to Codecov" - uses: "codecov/codecov-action@v6.0.0" + uses: "codecov/codecov-action@v7.0.0" with: files: "./coverage.txt" verbose: true @@ -63,7 +63,7 @@ jobs: name: "WASM Tests" runs-on: "depot-ubuntu-24.04-4" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/setup-go@main" with: # NOTE: This needs to match the toolchain version, or else diff --git a/.github/workflows/docs.yaml b/.github/workflows/docs.yaml index cf6feb9a..0e44e388 100644 --- a/.github/workflows/docs.yaml +++ b/.github/workflows/docs.yaml @@ -20,7 +20,7 @@ jobs: name: "Generate & Sync Documentation" runs-on: "ubuntu-latest" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/setup-go@main" - uses: "authzed/actions/setup-mage@main" @@ -28,7 +28,7 @@ jobs: run: "mage gen:docsForPublish" - name: "Checkout docs repository" - uses: "actions/checkout@v6" + uses: "actions/checkout@v7" with: token: "${{ secrets.GITHUB_TOKEN }}" repository: "${{ env.DOCS_REPO }}" @@ -71,7 +71,7 @@ jobs: GH_TOKEN: "${{ secrets.AUTHZEDAPPROVER_REPO_SCOPED_TOKEN }}" - name: "Notify in Slack if failure" if: "${{ failure() }}" - uses: "slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95" # v3.0.1 + uses: "slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d" # v4.0.0 with: webhook: "${{ secrets.SLACK_BUILDS_WEBHOOK_URL }}" webhook-type: "incoming-webhook" diff --git a/.github/workflows/lint.yaml b/.github/workflows/lint.yaml index cb905249..b67d8bdf 100644 --- a/.github/workflows/lint.yaml +++ b/.github/workflows/lint.yaml @@ -15,7 +15,7 @@ jobs: name: "Lint Go" runs-on: "depot-ubuntu-latest-arm" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/setup-go@main" - uses: "authzed/actions/gofumpt@main" - uses: "authzed/actions/go-mod-tidy@main" @@ -26,7 +26,7 @@ jobs: name: "Lint YAML & Markdown" runs-on: "depot-ubuntu-latest" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/yaml-lint@main" - uses: "authzed/actions/markdown-lint@main" with: @@ -44,7 +44,7 @@ jobs: matrix: language: ["go"] steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/setup-go@main" - uses: "authzed/actions/codeql@main" @@ -52,8 +52,8 @@ jobs: name: "Analyze FS with Trivy" runs-on: "depot-ubuntu-latest" steps: - - uses: "actions/checkout@v6" - - uses: "aquasecurity/trivy-action@57a97c7e7821a5776cebc9bb87c984fa69cba8f1" # For https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23 + - uses: "actions/checkout@v7" + - uses: "aquasecurity/trivy-action@ed142fd0673e97e23eac54620cfb913e5ce36c25" # For https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23 with: scan-type: "fs" ignore-unfixed: true @@ -68,7 +68,7 @@ jobs: name: "Analyze Release Image with Trivy" runs-on: "depot-ubuntu-latest" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" - uses: "authzed/actions/setup-go@main" # Workaround until goreleaser release supports --single-target # makes the build faster by not building everything @@ -103,5 +103,5 @@ jobs: runs-on: "depot-ubuntu-24.04-small" if: "github.event_name == 'pull_request' && (github.event.action == 'opened' || github.event.action == 'synchronize' || github.event.action == 'reopened' || github.event.action == 'edited')" steps: - - uses: "actions/checkout@v6" - - uses: "webiny/action-conventional-commits@v1.3.1" + - uses: "actions/checkout@v7" + - uses: "webiny/action-conventional-commits@v1.4.2" diff --git a/.github/workflows/release-windows.yml b/.github/workflows/release-windows.yml index 82432e10..b4794e84 100644 --- a/.github/workflows/release-windows.yml +++ b/.github/workflows/release-windows.yml @@ -17,7 +17,7 @@ jobs: release-windows: runs-on: "windows-latest" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" with: fetch-depth: 0 ref: "${{ inputs.tag || github.ref }}" @@ -44,7 +44,7 @@ jobs: CHOCOLATEY_API_KEY: "${{ secrets.CHOCOLATEY_API_KEY }}" - name: "Notify in Slack if failure" if: "${{ failure() }}" - uses: "slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95" # v3.0.1 + uses: "slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d" # v4.0.0 with: webhook: "${{ secrets.SLACK_BUILDS_WEBHOOK_URL }}" webhook-type: "incoming-webhook" diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 17c6beca..08bcf382 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -15,7 +15,7 @@ jobs: github: runs-on: "macos-latest" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" with: fetch-depth: 0 ref: "${{ inputs.tag || github.ref }}" @@ -40,7 +40,7 @@ jobs: GEMFURY_PUSH_TOKEN: "${{ secrets.GEMFURY_PUSH_TOKEN }}" - name: "Notify in Slack if failure" if: "${{ failure() }}" - uses: "slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95" # v3.0.1 + uses: "slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d" # v4.0.0 with: webhook: "${{ secrets.SLACK_BUILDS_WEBHOOK_URL }}" webhook-type: "incoming-webhook" @@ -57,7 +57,7 @@ jobs: docker: runs-on: "depot-ubuntu-latest-arm" steps: - - uses: "actions/checkout@v6" + - uses: "actions/checkout@v7" with: fetch-depth: 0 ref: "${{ inputs.tag || github.ref }}" @@ -81,7 +81,7 @@ jobs: GORELEASER_KEY: "${{ secrets.GORELEASER_KEY }}" - name: "Notify in Slack if failure" if: "${{ failure() }}" - uses: "slackapi/slack-github-action@af78098f536edbc4de71162a307590698245be95" # v3.0.1 + uses: "slackapi/slack-github-action@dcb1066f776dd043e64d0e8ba94ca15cc7e1875d" # v4.0.0 with: webhook: "${{ secrets.SLACK_BUILDS_WEBHOOK_URL }}" webhook-type: "incoming-webhook"