From d88a2a0e87f8102a333265e6c0596537aa0feba2 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 4 Aug 2026 18:13:56 +0000 Subject: [PATCH] Chore(deps): bump the actions-deps group across 1 directory with 7 updates Bumps the actions-deps group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `7.0.0` | `7.0.1` | | [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action) | `0.5.7` | `0.6.1` | | [actions/setup-go](https://github.com/actions/setup-go) | `6.5.0` | `7.0.0` | | [buildpacks/github-actions/setup-tools](https://github.com/buildpacks/github-actions) | `5.12.5` | `6.0.0` | | [buildpacks/github-actions/setup-pack](https://github.com/buildpacks/github-actions) | `5.12.5` | `6.0.0` | | [1password/load-secrets-action](https://github.com/1password/load-secrets-action) | `4.0.1` | `4.1.1` | | [docker/login-action](https://github.com/docker/login-action) | `4.4.0` | `4.5.2` | Updates `actions/checkout` from 7.0.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0...3d3c42e5aac5ba805825da76410c181273ba90b1) Updates `zizmorcore/zizmor-action` from 0.5.7 to 0.6.1 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/192e21d79ab29983730a13d1382995c2307fbcaa...6fc4b006235f201fdab3722e17240ab420d580e5) Updates `actions/setup-go` from 6.5.0 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/924ae3a1cded613372ab5595356fb5720e22ba16...b7ad1dad31e06c5925ef5d2fc7ad053ef454303e) Updates `buildpacks/github-actions/setup-tools` from 5.12.5 to 6.0.0 - [Release notes](https://github.com/buildpacks/github-actions/releases) - [Commits](https://github.com/buildpacks/github-actions/compare/e3b14c6e906f91da358e01dc2849ce068188107f...c1c71086a0e89a65c04ea113390227fd7f05d9df) Updates `buildpacks/github-actions/setup-pack` from 5.12.5 to 6.0.0 - [Release notes](https://github.com/buildpacks/github-actions/releases) - [Commits](https://github.com/buildpacks/github-actions/compare/e3b14c6e906f91da358e01dc2849ce068188107f...c1c71086a0e89a65c04ea113390227fd7f05d9df) Updates `1password/load-secrets-action` from 4.0.1 to 4.1.1 - [Release notes](https://github.com/1password/load-secrets-action/releases) - [Commits](https://github.com/1password/load-secrets-action/compare/3a12b0ab99d9cd590a3e9b5a90ea017210ed9556...eb2efd0703da22a93c467f2d1ffbb6826c11e19c) Updates `docker/login-action` from 4.4.0 to 4.5.2 - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/af1e73f918a031802d376d3c8bbc3fe56130a9b0...371161bbe7024a29a25c5e19bfcbc0804fe9ad2c) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 7.0.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions-deps - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: actions/setup-go dependency-version: 7.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: buildpacks/github-actions/setup-tools dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: buildpacks/github-actions/setup-pack dependency-version: 6.0.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions-deps - dependency-name: 1password/load-secrets-action dependency-version: 4.1.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps - dependency-name: docker/login-action dependency-version: 4.5.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions-deps ... Signed-off-by: dependabot[bot] --- .github/workflows/pr.yml | 18 +++++++++--------- .github/workflows/release.yml | 12 ++++++------ .github/workflows/update-deps.yml | 2 +- 3 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/pr.yml b/.github/workflows/pr.yml index 8a68d7f..b4bac93 100644 --- a/.github/workflows/pr.yml +++ b/.github/workflows/pr.yml @@ -19,10 +19,10 @@ jobs: contents: read actions: read steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: zizmorcore/zizmor-action@192e21d79ab29983730a13d1382995c2307fbcaa # v0.5.7 + - uses: zizmorcore/zizmor-action@6fc4b006235f201fdab3722e17240ab420d580e5 # v0.6.1 build: env: @@ -32,15 +32,15 @@ jobs: package: ${{ steps.setup.outputs.package }} runs-on: ubuntu-latest steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: go.mod cache: false - - uses: buildpacks/github-actions/setup-tools@e3b14c6e906f91da358e01dc2849ce068188107f # v5.12.5 - - uses: buildpacks/github-actions/setup-pack@e3b14c6e906f91da358e01dc2849ce068188107f # v5.12.5 + - uses: buildpacks/github-actions/setup-tools@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0 + - uses: buildpacks/github-actions/setup-pack@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0 - id: setup shell: bash run: | @@ -103,7 +103,7 @@ jobs: - { test: test-mdbook, webserver: nginx, builder: "paketobuildpacks/ubuntu-noble-builder:latest", runner: ubuntu-24.04-arm } - { test: test-mdbook, webserver: httpd, builder: "paketobuildpacks/ubuntu-noble-builder:latest", runner: ubuntu-24.04-arm } steps: - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: persist-credentials: false - run: docker pull ${PACKAGE} @@ -114,8 +114,8 @@ jobs: with: image: "docker://${{ needs.build.outputs.package }}" version: ${{ env.BP_VERSION }} - - uses: buildpacks/github-actions/setup-tools@e3b14c6e906f91da358e01dc2849ce068188107f # v5.12.5 - - uses: buildpacks/github-actions/setup-pack@e3b14c6e906f91da358e01dc2849ce068188107f # v5.12.5 + - uses: buildpacks/github-actions/setup-tools@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0 + - uses: buildpacks/github-actions/setup-pack@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0 - run: | make setup \ builder=${{ matrix.builder }} diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 055d8a1..a2e5dc0 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -16,7 +16,7 @@ jobs: DOCKER_REPO: "buildpacks" steps: - id: load-registry-credentials - uses: 1password/load-secrets-action@3a12b0ab99d9cd590a3e9b5a90ea017210ed9556 # v4.0.1 + uses: 1password/load-secrets-action@eb2efd0703da22a93c467f2d1ffbb6826c11e19c # v4.1.1 with: export-env: false env: @@ -30,16 +30,16 @@ jobs: private-key: ${{ secrets.RUNWAY_CI_BOT_PRIVATE_KEY }} owner: ${{ github.repository_owner }} permission-contents: write - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v6 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v6 with: token: ${{ steps.app-token.outputs.token }} fetch-depth: 0 persist-credentials: true - - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6 + - uses: actions/setup-go@b7ad1dad31e06c5925ef5d2fc7ad053ef454303e # v7.0.0 with: go-version-file: go.mod cache: false - - uses: docker/login-action@af1e73f918a031802d376d3c8bbc3fe56130a9b0 # v4 + - uses: docker/login-action@371161bbe7024a29a25c5e19bfcbc0804fe9ad2c # v4 with: registry: ${{ env.DOCKER_REGISTRY }} username: ${{ steps.load-registry-credentials.outputs.REGISTRY_USERNAME }} @@ -50,8 +50,8 @@ jobs: args: release --clean env: GITHUB_TOKEN: ${{ steps.app-token.outputs.token }} - - uses: buildpacks/github-actions/setup-tools@e3b14c6e906f91da358e01dc2849ce068188107f # v5.12.5 - - uses: buildpacks/github-actions/setup-pack@e3b14c6e906f91da358e01dc2849ce068188107f # v5.12.5 + - uses: buildpacks/github-actions/setup-tools@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0 + - uses: buildpacks/github-actions/setup-pack@c1c71086a0e89a65c04ea113390227fd7f05d9df # v6.0.0 - id: extract-version run: echo "version=$(jq -r '.version' dist/metadata.json)" >> $GITHUB_OUTPUT - id: extract-package diff --git a/.github/workflows/update-deps.yml b/.github/workflows/update-deps.yml index 8e9a876..4f39540 100644 --- a/.github/workflows/update-deps.yml +++ b/.github/workflows/update-deps.yml @@ -24,7 +24,7 @@ jobs: owner: ${{ github.repository_owner }} permission-pull-requests: write permission-contents: write - - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 + - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1 with: token: ${{ steps.app-token.outputs.token }} persist-credentials: true