Skip to content

Commit afa0335

Browse files
dependabot[bot]dependabot[bot]
authored
chore(deps): Bump the actions group across 1 directory with 7 updates (#129)
Bumps the actions group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` | | [github/codeql-action](https://github.com/github/codeql-action) | `3` | `4` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `3` | `4` | | [docker/login-action](https://github.com/docker/login-action) | `3` | `4` | | [azure/setup-kubectl](https://github.com/azure/setup-kubectl) | `3` | `5` | | [google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml](https://github.com/google/osv-scanner-action) | `2.0.1` | `2.3.8` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v4...v6) Updates `actions/setup-go` from 5 to 6 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v5...v6) Updates `github/codeql-action` from 3 to 4 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](github/codeql-action@v3...v4) Updates `docker/setup-buildx-action` from 3 to 4 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](docker/setup-buildx-action@v3...v4) Updates `docker/login-action` from 3 to 4 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](docker/login-action@v3...v4) Updates `azure/setup-kubectl` from 3 to 5 - [Release notes](https://github.com/azure/setup-kubectl/releases) - [Changelog](https://github.com/Azure/setup-kubectl/blob/main/CHANGELOG.md) - [Commits](Azure/setup-kubectl@v3...v5) Updates `google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml` from 2.0.1 to 2.3.8 - [Release notes](https://github.com/google/osv-scanner-action/releases) - [Commits](google/osv-scanner-action@v2.0.1...v2.3.8) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-go dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: azure/setup-kubectl dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: docker/setup-buildx-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: github/codeql-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml dependency-version: 2.3.8 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 1f2bce9 commit afa0335

6 files changed

Lines changed: 31 additions & 31 deletions

File tree

‎.github/workflows/ci.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -49,7 +49,7 @@ jobs:
4949
runs-on: ubuntu-latest
5050
if: github.event_name == 'pull_request'
5151
steps:
52-
- uses: actions/checkout@v4
52+
- uses: actions/checkout@v6
5353
with:
5454
fetch-depth: 0
5555
- name: Fail if PR branch is behind its base branch
@@ -100,10 +100,10 @@ jobs:
100100
# exactly as deploy.yml's proven-green gate does.
101101
TEST_POSTGRES_CUSTOMERS_URL: postgres://postgres:postgres@localhost:5432/instant_customers?sslmode=disable
102102
steps:
103-
- uses: actions/checkout@v4
103+
- uses: actions/checkout@v6
104104

105105
- name: Checkout proto sibling (for go.mod replace ../proto)
106-
uses: actions/checkout@v4
106+
uses: actions/checkout@v6
107107
with:
108108
repository: ${{ vars.PROTO_REPO || format('{0}/proto', github.repository_owner) }}
109109
token: ${{ secrets.REPO_ACCESS_TOKEN }}
@@ -113,7 +113,7 @@ jobs:
113113
run: mv _proto_ci ../proto
114114

115115
- name: Checkout common sibling (for go.mod replace ../common)
116-
uses: actions/checkout@v4
116+
uses: actions/checkout@v6
117117
with:
118118
repository: ${{ vars.COMMON_REPO || format('{0}/common', github.repository_owner) }}
119119
token: ${{ secrets.REPO_ACCESS_TOKEN }}
@@ -122,7 +122,7 @@ jobs:
122122
- name: Place ../common for Go replace directive
123123
run: mv _common_ci ../common
124124

125-
- uses: actions/setup-go@v5
125+
- uses: actions/setup-go@v6
126126
with:
127127
go-version: '1.25'
128128

@@ -168,10 +168,10 @@ jobs:
168168
if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
169169
runs-on: ubuntu-latest
170170
steps:
171-
- uses: actions/checkout@v4
171+
- uses: actions/checkout@v6
172172

173173
- name: Checkout proto sibling
174-
uses: actions/checkout@v4
174+
uses: actions/checkout@v6
175175
with:
176176
repository: ${{ vars.PROTO_REPO || format('{0}/proto', github.repository_owner) }}
177177
token: ${{ secrets.REPO_ACCESS_TOKEN }}
@@ -180,14 +180,14 @@ jobs:
180180
- run: mv _proto_ci ../proto
181181

182182
- name: Checkout common sibling
183-
uses: actions/checkout@v4
183+
uses: actions/checkout@v6
184184
with:
185185
repository: ${{ vars.COMMON_REPO || format('{0}/common', github.repository_owner) }}
186186
token: ${{ secrets.REPO_ACCESS_TOKEN }}
187187
path: _common_ci
188188
- run: mv _common_ci ../common
189189

190-
- uses: actions/setup-go@v5
190+
- uses: actions/setup-go@v6
191191
with:
192192
go-version: '1.25'
193193

‎.github/workflows/codeql.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -20,29 +20,29 @@ jobs:
2020
timeout-minutes: 30
2121
steps:
2222
- name: Checkout this repo
23-
uses: actions/checkout@v4
23+
uses: actions/checkout@v6
2424
with:
2525
path: api
2626
- name: Checkout sibling InstaNode-dev/common
27-
uses: actions/checkout@v4
27+
uses: actions/checkout@v6
2828
with:
2929
repository: InstaNode-dev/common
3030
path: common
3131
- name: Checkout sibling InstaNode-dev/proto
32-
uses: actions/checkout@v4
32+
uses: actions/checkout@v6
3333
with:
3434
repository: InstaNode-dev/proto
3535
path: proto
36-
- uses: actions/setup-go@v5
36+
- uses: actions/setup-go@v6
3737
with:
3838
go-version-file: api/go.mod
39-
- uses: github/codeql-action/init@v3
39+
- uses: github/codeql-action/init@v4
4040
with:
4141
languages: go
4242
queries: security-extended
4343
- name: Build
4444
working-directory: api
4545
run: go build ./...
46-
- uses: github/codeql-action/analyze@v3
46+
- uses: github/codeql-action/analyze@v4
4747
with:
4848
category: "/language:go"

‎.github/workflows/deploy.yml‎

Lines changed: 7 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -97,12 +97,12 @@ jobs:
9797
--health-retries 12
9898
steps:
9999
- name: Checkout api (this repo) into ./api
100-
uses: actions/checkout@v4
100+
uses: actions/checkout@v6
101101
with:
102102
path: api
103103

104104
- name: Checkout common sibling into ./common
105-
uses: actions/checkout@v4
105+
uses: actions/checkout@v6
106106
with:
107107
repository: ${{ vars.COMMON_REPO || format('{0}/common', github.repository_owner) }}
108108
# 2026-05-15: GITHUB_TOKEN is scoped to THIS repo only and 404s
@@ -114,7 +114,7 @@ jobs:
114114
path: common
115115

116116
- name: Checkout proto sibling into ./proto
117-
uses: actions/checkout@v4
117+
uses: actions/checkout@v6
118118
with:
119119
repository: ${{ vars.PROTO_REPO || format('{0}/proto', github.repository_owner) }}
120120
token: ${{ secrets.REPO_ACCESS_TOKEN }}
@@ -132,7 +132,7 @@ jobs:
132132
echo "Built ${VERSION} (${BUILD_TIME})"
133133
134134
- name: Set up Go (for unit tests + go.mod replace directives)
135-
uses: actions/setup-go@v5
135+
uses: actions/setup-go@v6
136136
with:
137137
go-version: '1.25'
138138

@@ -205,15 +205,15 @@ jobs:
205205
go test ./... -short -count=1 -p 1
206206
207207
- name: Set up Docker Buildx
208-
uses: docker/setup-buildx-action@v3
208+
uses: docker/setup-buildx-action@v4
209209

210210
- name: Log in to GHCR
211211
# 2026-05-17: the per-job GITHUB_TOKEN (even with packages: write)
212212
# is scoped to THIS repo and is not authorised to push the
213213
# org-owned package ghcr.io/instanode-dev/instant-api — every push
214214
# 403'd. GHCR_PUSH_TOKEN is a classic PAT with write:packages owned
215215
# by a user who has write access to that package. See task #121.
216-
uses: docker/login-action@v3
216+
uses: docker/login-action@v4
217217
with:
218218
registry: ghcr.io
219219
username: ${{ github.actor }}
@@ -235,7 +235,7 @@ jobs:
235235
.
236236
237237
- name: Set up kubectl
238-
uses: azure/setup-kubectl@v3
238+
uses: azure/setup-kubectl@v5
239239
with:
240240
version: 'latest'
241241

‎.github/workflows/govulncheck.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -17,20 +17,20 @@ jobs:
1717
timeout-minutes: 15
1818
steps:
1919
- name: Checkout this repo
20-
uses: actions/checkout@v4
20+
uses: actions/checkout@v6
2121
with:
2222
path: api
2323
- name: Checkout sibling InstaNode-dev/common
24-
uses: actions/checkout@v4
24+
uses: actions/checkout@v6
2525
with:
2626
repository: InstaNode-dev/common
2727
path: common
2828
- name: Checkout sibling InstaNode-dev/proto
29-
uses: actions/checkout@v4
29+
uses: actions/checkout@v6
3030
with:
3131
repository: InstaNode-dev/proto
3232
path: proto
33-
- uses: actions/setup-go@v5
33+
- uses: actions/setup-go@v6
3434
with:
3535
go-version-file: api/go.mod
3636
check-latest: true

‎.github/workflows/integration-backup.yml‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -50,19 +50,19 @@ jobs:
5050
if: ${{ vars.INTEGRATION_BACKUP_ENABLED == 'true' }}
5151
steps:
5252
- name: Check out api
53-
uses: actions/checkout@v4
53+
uses: actions/checkout@v6
5454
with:
5555
path: api
5656
- name: Check out infra (sibling repo with restore-drill.sh)
57-
uses: actions/checkout@v4
57+
uses: actions/checkout@v6
5858
with:
5959
repository: ${{ github.repository_owner }}/infra
6060
path: infra
6161
token: ${{ secrets.REPO_ACCESS_TOKEN }}
6262
- name: Install kubectl
63-
uses: azure/setup-kubectl@v4
63+
uses: azure/setup-kubectl@v5
6464
- name: Set up Go
65-
uses: actions/setup-go@v5
65+
uses: actions/setup-go@v6
6666
with:
6767
go-version-file: api/go.mod
6868
- name: Materialise drill kubeconfig

‎.github/workflows/osv-scanner.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -15,7 +15,7 @@ permissions:
1515

1616
jobs:
1717
scan:
18-
uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.0.1
18+
uses: google/osv-scanner-action/.github/workflows/osv-scanner-reusable.yml@v2.3.8
1919
permissions:
2020
actions: read
2121
contents: read

0 commit comments

Comments
 (0)