debt: Upgrade dependencies to latest stable versions

Author: mprimeaux

.github/workflows/ci.yaml

@@ -24,7 +24,7 @@ on:
       - 'LICENSE'
       - '**/*.md'
 
-# Declare default permissions as read only.
+# Declare default permissions as read-only.
 permissions: read-all
 
 jobs:
@@ -50,19 +50,19 @@ jobs:
           sudo DEBIAN_FRONTEND=noninteractive apt-get update
           sudo DEBIAN_FRONTEND=noninteractive apt-get install -y software-properties-common ca-certificates gnupg-agent curl build-essential make
 
-      # Ref: https://github.com/actions/checkout
+      # See: https://github.com/actions/checkout
       - name: Checkout Source
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
-      # Ref: https://github.com/actions/setup-go
+      # See: https://github.com/actions/setup-go
       - name: Install Go
         uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 
-      # Ref: https://github.com/golangci/golangci-lint-action
+      # See: https://github.com/golangci/golangci-lint-action
       - name: Lint
         uses: golangci/golangci-lint-action@v9
         with:
@@ -84,9 +84,9 @@ jobs:
         run: |
           make analyze          
 
-      # Ref: https://github.com/SonarSource/sonarqube-scan-action
+      # See: https://github.com/SonarSource/sonarqube-scan-action
       - name: SonarQube Scan
-        uses: SonarSource/sonarqube-scan-action@v6
+        uses: SonarSource/sonarqube-scan-action@v7
         env:
           SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
           GITHUB_USER: ${{ github.actor }}

.github/workflows/codeql-analysis.yaml

@@ -59,19 +59,19 @@ jobs:
           sudo DEBIAN_FRONTEND=noninteractive apt-get update
           sudo DEBIAN_FRONTEND=noninteractive apt-get install -y software-properties-common ca-certificates gnupg-agent curl build-essential make
 
-      # Ref: https://github.com/actions/checkout
+      # See: https://github.com/actions/checkout
       - name: Checkout Source
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
-      # Ref: https://github.com/actions/setup-go
+      # See: https://github.com/actions/setup-go
       - name: Install Go
         uses: actions/setup-go@v6
         with:
           go-version-file: go.mod
 
-      # Ref: https://github.com/github/codeql-action
+      # See: https://github.com/github/codeql-action
       - name: Initialize CodeQL
         uses: github/codeql-action/init@v4
         with:

.github/workflows/release.yaml

@@ -12,7 +12,7 @@ on:
   push:
     tags: ['v*']
 
-# Declare default permissions as read only.
+# Declare default permissions as read-only.
 permissions: read-all
 
 jobs:
@@ -41,13 +41,13 @@ jobs:
           sudo DEBIAN_FRONTEND=noninteractive apt-get update
           sudo DEBIAN_FRONTEND=noninteractive apt-get install -y software-properties-common ca-certificates gnupg-agent curl build-essential make
 
-      # Ref: https://github.com/actions/checkout
+      # See: https://github.com/actions/checkout
       - name: "Checkout Source"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
 
-      # Ref: https://github.com/actions/setup-go
+      # See: https://github.com/actions/setup-go
       - name: "Install Go"
         uses: actions/setup-go@v6
         with:
@@ -57,18 +57,18 @@ jobs:
         if: ${{ !startsWith(github.ref, 'refs/tags/v') }}
         run: echo "flags=--snapshot" >> $GITHUB_ENV
 
-      # Ref: https://github.com/sigstore/cosign-installer
+      # See: https://github.com/sigstore/cosign-installer
       - name: Install Cosign
         uses: sigstore/cosign-installer@v4.0.0
 
-      # Ref: https://github.com/anchore/sbom-action
+      # See: https://github.com/anchore/sbom-action
       - name: Generate SBOM via Syft
         uses: anchore/sbom-action@v0
         with:
           format: spdx-json
           artifact-name: sbom.spdx.json
 
-      # Ref: https://github.com/goreleaser/goreleaser-action
+      # See: https://github.com/goreleaser/goreleaser-action
       - name: "Release"
         uses: goreleaser/goreleaser-action@v6
         with:

.github/workflows/scorecard.yml

@@ -37,13 +37,13 @@ jobs:
       # actions: read
 
     steps:
-      # Ref: https://github.com/actions/checkout
+      # See: https://github.com/actions/checkout
       - name: "Checkout code"
-        uses: actions/checkout@v5
+        uses: actions/checkout@v6
         with:
           persist-credentials: false
 
-      # Ref: https://github.com/ossf/scorecard-action
+      # See: https://github.com/ossf/scorecard-action
       - name: "Run analysis"
         uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
         with:
@@ -69,17 +69,17 @@ jobs:
 
       # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
       # format to the repository Actions tab.
-      # Ref: https://github.com/actions/upload-artifact
+      # See: https://github.com/actions/upload-artifact
       - name: "Upload artifact"
-        uses: actions/upload-artifact@330a01c490aca151604b8cf639adc76d48f6c5d4 # v5.0.0
+        uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
         with:
           name: SARIF file
           path: results.sarif
           retention-days: 5
 
       # Upload the results to GitHub's code scanning dashboard (optional).
       # Commenting out will disable upload of results to your repo's Code Scanning dashboard
-      # Ref: https://github.com/github/codeql-action/releases
+      # See: https://github.com/github/codeql-action/releases
       - name: "Upload to code-scanning"
         uses: github/codeql-action/upload-sarif@v4
         with:

CHANGELOG/CHANGELOG-1.x.md

@@ -12,6 +12,8 @@ Date format: `YYYY-MM-DD`
 
 ### Added
 ### Changed
+- **debt:** Upgraded all dependencies to their latest stable versions.
+
 ### Deprecated
 ### Removed
 ### Fixed