From df1391a8590a5dc4379da6d927d5fd020e3ce1fc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Sep 2026 01:59:16 +0000 Subject: [PATCH] chore(deps): Bump the development-dependencies group with 12 updates Bumps the development-dependencies group with 12 updates: | Package | From | To | | --- | --- | --- | | [go-openapi/gh-actions/ci-jobs/wait-pending-jobs](https://github.com/go-openapi/gh-actions) | `1.4.19` | `1.4.20` | | [go-openapi/gh-actions/ci-jobs/detect-go-monorepo](https://github.com/go-openapi/gh-actions) | `1.4.19` | `1.4.20` | | [go-openapi/gh-actions/ci-jobs/next-tag](https://github.com/go-openapi/gh-actions) | `1.4.19` | `1.4.20` | | [go-openapi/gh-actions/ci-jobs/bot-credentials](https://github.com/go-openapi/gh-actions) | `1.4.19` | `1.4.20` | | [github/codeql-action/init](https://github.com/github/codeql-action) | `4.38.1` | `4.38.2` | | [github/codeql-action/analyze](https://github.com/github/codeql-action) | `4.38.1` | `4.38.2` | | [go-openapi/gh-actions/install/go-junit-report](https://github.com/go-openapi/gh-actions) | `1.4.19` | `1.4.20` | | [go-openapi/gh-actions/install/go-ctrf-json-reporter](https://github.com/go-openapi/gh-actions) | `1.4.19` | `1.4.20` | | [go-openapi/gh-actions/ci-jobs/detect-go-version](https://github.com/go-openapi/gh-actions) | `1.4.19` | `1.4.20` | | [go-openapi/gh-actions/install/gotestsum](https://github.com/go-openapi/gh-actions) | `1.4.19` | `1.4.20` | | [taiki-e/install-action](https://github.com/taiki-e/install-action) | `2.87.18` | `2.87.20` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.38.1` | `4.38.2` | Updates `go-openapi/gh-actions/ci-jobs/wait-pending-jobs` from 1.4.19 to 1.4.20 - [Release notes](https://github.com/go-openapi/gh-actions/releases) - [Changelog](https://github.com/go-openapi/gh-actions/blob/master/release_tracker.go) - [Commits](https://github.com/go-openapi/gh-actions/compare/c0f86e95429fd84e4c96786d630422e9221f556a...2a20802fd4ec9b9fd4732b832c91fec9c4aae777) Updates `go-openapi/gh-actions/ci-jobs/detect-go-monorepo` from 1.4.19 to 1.4.20 - [Release notes](https://github.com/go-openapi/gh-actions/releases) - [Changelog](https://github.com/go-openapi/gh-actions/blob/master/release_tracker.go) - [Commits](https://github.com/go-openapi/gh-actions/compare/c0f86e95429fd84e4c96786d630422e9221f556a...2a20802fd4ec9b9fd4732b832c91fec9c4aae777) Updates `go-openapi/gh-actions/ci-jobs/next-tag` from 1.4.19 to 1.4.20 - [Release notes](https://github.com/go-openapi/gh-actions/releases) - [Changelog](https://github.com/go-openapi/gh-actions/blob/master/release_tracker.go) - [Commits](https://github.com/go-openapi/gh-actions/compare/c0f86e95429fd84e4c96786d630422e9221f556a...2a20802fd4ec9b9fd4732b832c91fec9c4aae777) Updates `go-openapi/gh-actions/ci-jobs/bot-credentials` from 1.4.19 to 1.4.20 - [Release notes](https://github.com/go-openapi/gh-actions/releases) - [Changelog](https://github.com/go-openapi/gh-actions/blob/master/release_tracker.go) - [Commits](https://github.com/go-openapi/gh-actions/compare/c0f86e95429fd84e4c96786d630422e9221f556a...2a20802fd4ec9b9fd4732b832c91fec9c4aae777) Updates `github/codeql-action/init` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `github/codeql-action/analyze` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) Updates `go-openapi/gh-actions/install/go-junit-report` from 1.4.19 to 1.4.20 - [Release notes](https://github.com/go-openapi/gh-actions/releases) - [Changelog](https://github.com/go-openapi/gh-actions/blob/master/release_tracker.go) - [Commits](https://github.com/go-openapi/gh-actions/compare/c0f86e95429fd84e4c96786d630422e9221f556a...2a20802fd4ec9b9fd4732b832c91fec9c4aae777) Updates `go-openapi/gh-actions/install/go-ctrf-json-reporter` from 1.4.19 to 1.4.20 - [Release notes](https://github.com/go-openapi/gh-actions/releases) - [Changelog](https://github.com/go-openapi/gh-actions/blob/master/release_tracker.go) - [Commits](https://github.com/go-openapi/gh-actions/compare/c0f86e95429fd84e4c96786d630422e9221f556a...2a20802fd4ec9b9fd4732b832c91fec9c4aae777) Updates `go-openapi/gh-actions/ci-jobs/detect-go-version` from 1.4.19 to 1.4.20 - [Release notes](https://github.com/go-openapi/gh-actions/releases) - [Changelog](https://github.com/go-openapi/gh-actions/blob/master/release_tracker.go) - [Commits](https://github.com/go-openapi/gh-actions/compare/c0f86e95429fd84e4c96786d630422e9221f556a...2a20802fd4ec9b9fd4732b832c91fec9c4aae777) Updates `go-openapi/gh-actions/install/gotestsum` from 1.4.19 to 1.4.20 - [Release notes](https://github.com/go-openapi/gh-actions/releases) - [Changelog](https://github.com/go-openapi/gh-actions/blob/master/release_tracker.go) - [Commits](https://github.com/go-openapi/gh-actions/compare/c0f86e95429fd84e4c96786d630422e9221f556a...2a20802fd4ec9b9fd4732b832c91fec9c4aae777) Updates `taiki-e/install-action` from 2.87.18 to 2.87.20 - [Release notes](https://github.com/taiki-e/install-action/releases) - [Changelog](https://github.com/taiki-e/install-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/taiki-e/install-action/compare/dfae9bf3d6f6c6f20ef4ebb3486c01a51341ff12...9983c65e42da123ff25d1f78505eb6de315aa172) Updates `github/codeql-action/upload-sarif` from 4.38.1 to 4.38.2 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/1c5b675653bb5c22dbe9b12b556ec555138e09fd...2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2) --- updated-dependencies: - dependency-name: go-openapi/gh-actions/ci-jobs/wait-pending-jobs dependency-version: 1.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/gh-actions/ci-jobs/detect-go-monorepo dependency-version: 1.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/gh-actions/ci-jobs/next-tag dependency-version: 1.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/gh-actions/ci-jobs/bot-credentials dependency-version: 1.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: github/codeql-action/init dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: github/codeql-action/analyze dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/gh-actions/install/go-junit-report dependency-version: 1.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/gh-actions/install/go-ctrf-json-reporter dependency-version: 1.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/gh-actions/ci-jobs/detect-go-version dependency-version: 1.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/gh-actions/install/gotestsum dependency-version: 1.4.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: taiki-e/install-action dependency-version: 2.87.20 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.38.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-merge.yml | 2 +- .github/workflows/bump-release-monorepo.yml | 6 +++--- .github/workflows/bump-release.yml | 4 ++-- .github/workflows/codeql.yml | 4 ++-- .github/workflows/collect-reports.yml | 4 ++-- .github/workflows/contributors.yml | 4 ++-- .github/workflows/go-test-monorepo.yml | 6 +++--- .github/workflows/go-test.yml | 2 +- .github/workflows/prepare-release-monorepo.yml | 6 +++--- .github/workflows/release.yml | 4 ++-- .github/workflows/scanner.yml | 4 ++-- 11 files changed, 23 insertions(+), 23 deletions(-) diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml index ecb8e66..3d01f32 100644 --- a/.github/workflows/auto-merge.yml +++ b/.github/workflows/auto-merge.yml @@ -159,7 +159,7 @@ jobs: run: gh pr review --approve "$PR_URL" - name: Wait for all workflow runs to complete - uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 with: pr-url: ${{ env.PR_URL }} github-token: ${{ env.GH_TOKEN }} diff --git a/.github/workflows/bump-release-monorepo.yml b/.github/workflows/bump-release-monorepo.yml index 330a1a4..5047ac2 100644 --- a/.github/workflows/bump-release-monorepo.yml +++ b/.github/workflows/bump-release-monorepo.yml @@ -136,7 +136,7 @@ jobs: - name: Detect go mono-repo id: detect-monorepo - uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 bump-release-single: name: Bump release (single module) @@ -195,7 +195,7 @@ jobs: - name: Determine next tag id: bump-release - uses: go-openapi/gh-actions/ci-jobs/next-tag@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/next-tag@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 with: bump-patch: ${{ steps.bump-check.outputs.bump-patch }} bump-minor: ${{ steps.bump-check.outputs.bump-minor }} @@ -307,7 +307,7 @@ jobs: - name: Configure bot credentials if: ${{ inputs.enable-tag-signing == 'true' }} - uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/bot-credentials@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 # This is using the GPG signature of bot-go-openapi. # # For go-openapi repos (using secrets: inherit): diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml index 3088976..e2e5c10 100644 --- a/.github/workflows/bump-release.yml +++ b/.github/workflows/bump-release.yml @@ -114,7 +114,7 @@ jobs: - name: Determine next tag id: bump-release - uses: go-openapi/gh-actions/ci-jobs/next-tag@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/next-tag@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 with: bump-patch: ${{ steps.bump-check.outputs.bump-patch }} bump-minor: ${{ steps.bump-check.outputs.bump-minor }} @@ -122,7 +122,7 @@ jobs: - name: Configure bot credentials if: ${{ inputs.enable-tag-signing == 'true' }} - uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/bot-credentials@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 # This is using the GPG signature of bot-go-openapi. # # For go-openapi repos (using secrets: inherit): diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 042b6cc..d5d2e29 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -26,9 +26,9 @@ jobs: - # Initializes the CodeQL tools for scanning. name: Initialize CodeQL - uses: github/codeql-action/init@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/init@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: languages: ${{ matrix.language }} - name: Analyze ${{ matrix.language }} - uses: github/codeql-action/analyze@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/analyze@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 diff --git a/.github/workflows/collect-reports.yml b/.github/workflows/collect-reports.yml index 9d212ac..5eb0bdb 100644 --- a/.github/workflows/collect-reports.yml +++ b/.github/workflows/collect-reports.yml @@ -48,7 +48,7 @@ jobs: path: reports/ - name: Install go-junit-report - uses: go-openapi/gh-actions/install/go-junit-report@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/install/go-junit-report@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 - name: Convert test reports to a merged JUnit XML # NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics. @@ -73,7 +73,7 @@ jobs: verbose: true - name: Install go-ctrf-json-reporter - uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 - name: Convert test reports to CTRF JSON # description: | diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml index 94114e5..c501838 100644 --- a/.github/workflows/contributors.yml +++ b/.github/workflows/contributors.yml @@ -118,7 +118,7 @@ jobs: } > "${file}" done - name: Configure bot credentials - uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/bot-credentials@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 id: bot-credentials # For go-openapi repos (using secrets: inherit): # Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc. @@ -183,7 +183,7 @@ jobs: - name: Auto-approve PR run: gh pr review --approve "$PR_URL" - name: Wait for all workflow runs to complete - uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 with: pr-url: ${{ env.PR_URL }} github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/go-test-monorepo.yml b/.github/workflows/go-test-monorepo.yml index 1f6c58f..590931c 100644 --- a/.github/workflows/go-test-monorepo.yml +++ b/.github/workflows/go-test-monorepo.yml @@ -96,7 +96,7 @@ jobs: - name: Detect go mono-repo id: detect-monorepo - uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 - name: golangci-lint [monorepo] # golangci-action v9.1+ has an experimental built-in mono repo detection setup. @@ -190,10 +190,10 @@ jobs: - name: Detect go version capabilities id: detect-go-version - uses: go-openapi/gh-actions/ci-jobs/detect-go-version@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/detect-go-version@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 - name: Install gotestsum - uses: go-openapi/gh-actions/install/gotestsum@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/install/gotestsum@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 - name: Ensure TMP is created on windows runners # On windows, some tests require testing.TempDir to reside on the same drive as the code. diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml index 8d1ff48..3a2d494 100644 --- a/.github/workflows/go-test.yml +++ b/.github/workflows/go-test.yml @@ -137,7 +137,7 @@ jobs: cache: true - name: Install gotestsum - uses: go-openapi/gh-actions/install/gotestsum@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/install/gotestsum@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 - name: Ensure TMP is created on windows runners # On windows, some tests require testing.TempDir to reside on the same drive as the code. diff --git a/.github/workflows/prepare-release-monorepo.yml b/.github/workflows/prepare-release-monorepo.yml index 430237e..e2eb074 100644 --- a/.github/workflows/prepare-release-monorepo.yml +++ b/.github/workflows/prepare-release-monorepo.yml @@ -108,7 +108,7 @@ jobs: cache-dependency-path: "**/go.sum" - name: Detect go mono-repo id: detect-monorepo - uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 - name: Update go.mod files for new release env: TARGET_TAG: ${{ inputs.target-tag }} @@ -295,7 +295,7 @@ jobs: echo "::notice title=changes::Git status after updates" git status --short - name: Configure bot credentials - uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/bot-credentials@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 id: bot-credentials # For go-openapi repos (using secrets: inherit): # Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc. @@ -378,7 +378,7 @@ jobs: run: gh pr review --approve "$PR_URL" - name: Wait for all workflow runs to complete if: ${{ needs.prepare-modules.outputs.pull-request-url != '' }} - uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 with: pr-url: ${{ env.PR_URL }} github-token: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 365f6fa..eb2215e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -91,10 +91,10 @@ jobs: name: Detect go mono-repo if: ${{ inputs.is-monorepo == 'true' }} id: detect-monorepo - uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c0f86e95429fd84e4c96786d630422e9221f556a # v1.4.19 + uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@2a20802fd4ec9b9fd4732b832c91fec9c4aae777 # v1.4.20 - name: Install git-cliff - uses: taiki-e/install-action@dfae9bf3d6f6c6f20ef4ebb3486c01a51341ff12 # v2.87.18 + uses: taiki-e/install-action@9983c65e42da123ff25d1f78505eb6de315aa172 # v2.87.20 with: tool: git-cliff - diff --git a/.github/workflows/scanner.yml b/.github/workflows/scanner.yml index 7c13051..d62733a 100644 --- a/.github/workflows/scanner.yml +++ b/.github/workflows/scanner.yml @@ -49,7 +49,7 @@ jobs: exit-code: 0 - name: Upload trivy findings to code scanning dashboard - uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: trivy sarif_file: trivy-code-report.sarif @@ -69,7 +69,7 @@ jobs: output-file: govulnscan-report.sarif - name: Upload govulnscan findings to code scanning dashboard - uses: github/codeql-action/upload-sarif@1c5b675653bb5c22dbe9b12b556ec555138e09fd # v4.38.1 + uses: github/codeql-action/upload-sarif@2892aa5e19bbd11bc0cff5427e3b750a04d9e3c2 # v4.38.2 with: category: govulnscan sarif_file: govulnscan-report.sarif