Skip to content

Commit dfc48ed

Browse files
sudo-bmitchsudo-bmitch
committed
Version bump
- Go to v1.26.4 - Alpine to v3.24.0 - actions/checkout to v6.0.3 - securego/gosec to v2.27.1 - regclient/regclient to v0.11.5 - golang.org/x/crypto to v0.53.0 - golang.org/x/sys to v0.46.0 Signed-off-by: Brandon Mitchell <git@bmitch.net>
1 parent eb1b466 commit dfc48ed

11 files changed

Lines changed: 31 additions & 31 deletions

File tree

‎.github/workflows/docker.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,7 @@ jobs:
7373
echo "created=$(date -u +'%Y-%m-%dT%H:%M:%SZ')" >>$GITHUB_OUTPUT
7474
7575
- name: Check out code
76-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
76+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
7777

7878
- name: Set up Docker Buildx
7979
uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0

‎.github/workflows/go.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -29,7 +29,7 @@ jobs:
2929
id: go
3030

3131
- name: Check out code
32-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
32+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
3333

3434
- name: Get dependencies
3535
run: |

‎.github/workflows/version-bump.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212

1313
steps:
1414
- name: Check out code
15-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
15+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
1616

1717
# version check is intentionally not pinned (self reference testing the main branch)
1818
- name: Version Check

‎.github/workflows/vulnscans.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -14,7 +14,7 @@ jobs:
1414

1515
steps:
1616
- name: Check out code
17-
uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
17+
uses: actions/checkout@df4cb1c069e1874edd31b4311f1884172cec0e10 # v6.0.3
1818

1919
- name: "Set up Go"
2020
uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0

‎.osv-scanner.toml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
GoVersionOverride = "1.26.3"
1+
GoVersionOverride = "1.26.4"

‎.version-bump.lock‎

Lines changed: 8 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,17 @@
1-
{"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.23.4","version":"sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11"}
2-
{"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.23.4"}
3-
{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.26.3-alpine","version":"sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d"}
4-
{"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.26.3"}
1+
{"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.24.0","version":"sha256:a2d49ea686c2adfe3c992e47dc3b5e7fa6e6b5055609400dc2acaeb241c829f4"}
2+
{"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.24.0"}
3+
{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.26.4-alpine","version":"sha256:f23e8b227fb4493eabe03bede4d5a32d04092da71962f1fb79b5f7d1e6c2a17f"}
4+
{"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.26.4"}
55
{"name":"gha-golang-release","key":"golang-latest","version":"1.26"}
6-
{"name":"gha-uses-commit","key":"https://github.com/actions/checkout.git:v6.0.2","version":"de0fac2e4500dabe0009e67214ff5f5447ce83dd"}
6+
{"name":"gha-uses-commit","key":"https://github.com/actions/checkout.git:v6.0.3","version":"df4cb1c069e1874edd31b4311f1884172cec0e10"}
77
{"name":"gha-uses-commit","key":"https://github.com/actions/setup-go.git:v6.4.0","version":"4a3601121dd01d1626a1e23e37211e3254c1c06c"}
88
{"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v7.0.1","version":"043fb46d1a93c77aae656e7c1c64a875d1fc6a0a"}
99
{"name":"gha-uses-commit","key":"https://github.com/docker/build-push-action.git:v7.2.0","version":"f9f3042f7e2789586610d6e8b85c8f03e5195baf"}
1010
{"name":"gha-uses-commit","key":"https://github.com/docker/login-action.git:v4.2.0","version":"650006c6eb7dba73a995cc03b0b2d7f5ca915bee"}
1111
{"name":"gha-uses-commit","key":"https://github.com/docker/setup-buildx-action.git:v4.1.0","version":"d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5"}
1212
{"name":"gha-uses-commit","key":"https://github.com/sigstore/cosign-installer.git:v4.1.2","version":"6f9f17788090df1f26f669e9d70d6ae9567deba6"}
1313
{"name":"gha-uses-commit","key":"https://github.com/softprops/action-gh-release.git:v3.0.0","version":"b4309332981a82ec1c5618f44dd2e27cc8bfbfda"}
14-
{"name":"gha-uses-semver","key":"https://github.com/actions/checkout.git","version":"v6.0.2"}
14+
{"name":"gha-uses-semver","key":"https://github.com/actions/checkout.git","version":"v6.0.3"}
1515
{"name":"gha-uses-semver","key":"https://github.com/actions/setup-go.git","version":"v6.4.0"}
1616
{"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v7.0.1"}
1717
{"name":"gha-uses-semver","key":"https://github.com/docker/build-push-action.git","version":"v7.2.0"}
@@ -23,8 +23,8 @@
2323
{"name":"makefile-go-vulncheck","key":"https://go.googlesource.com/vuln.git","version":"v1.3.0"}
2424
{"name":"makefile-gofumpt","key":"https://github.com/mvdan/gofumpt.git","version":"v0.10.0"}
2525
{"name":"makefile-gomajor","key":"https://github.com/icholy/gomajor.git","version":"v0.15.0"}
26-
{"name":"makefile-gosec","key":"https://github.com/securego/gosec.git","version":"v2.26.1"}
26+
{"name":"makefile-gosec","key":"https://github.com/securego/gosec.git","version":"v2.27.1"}
2727
{"name":"makefile-markdown-lint","key":"docker.io/davidanson/markdownlint-cli2","version":"v0.22.1"}
2828
{"name":"makefile-osv-scanner","key":"https://github.com/google/osv-scanner.git","version":"v2.3.8"}
2929
{"name":"makefile-staticcheck","key":"https://github.com/dominikh/go-tools.git","version":"v0.7.0"}
30-
{"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.26.3"}
30+
{"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.26.4"}

‎Dockerfile‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
ARG REGISTRY=docker.io
2-
ARG ALPINE_VER=3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
3-
ARG GO_VER=1.26.3-alpine@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d
2+
ARG ALPINE_VER=3.24.0@sha256:a2d49ea686c2adfe3c992e47dc3b5e7fa6e6b5055609400dc2acaeb241c829f4
3+
ARG GO_VER=1.26.4-alpine@sha256:f23e8b227fb4493eabe03bede4d5a32d04092da71962f1fb79b5f7d1e6c2a17f
44

55
FROM ${REGISTRY}/library/golang:${GO_VER} AS build
66
RUN apk add --no-cache \

‎Dockerfile.buildkit‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1,6 +1,6 @@
11
ARG REGISTRY=docker.io
2-
ARG ALPINE_VER=3.23.4@sha256:5b10f432ef3da1b8d4c7eb6c487f2f5a8f096bc91145e68878dd4a5019afde11
3-
ARG GO_VER=1.26.3-alpine@sha256:91eda9776261207ea25fd06b5b7fed8d397dd2c0a283e77f2ab6e91bfa71079d
2+
ARG ALPINE_VER=3.24.0@sha256:a2d49ea686c2adfe3c992e47dc3b5e7fa6e6b5055609400dc2acaeb241c829f4
3+
ARG GO_VER=1.26.4-alpine@sha256:f23e8b227fb4493eabe03bede4d5a32d04092da71962f1fb79b5f7d1e6c2a17f
44

55
FROM --platform=$BUILDPLATFORM ${REGISTRY}/library/golang:${GO_VER} AS build
66
RUN apk add --no-cache \

‎Makefile‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@ PWD:=$(shell pwd)
2020
MARKDOWN_LINT_VER?=v0.22.1
2121
GOFUMPT_VER?=v0.10.0
2222
GOMAJOR_VER?=v0.15.0
23-
GOSEC_VER?=v2.26.1
23+
GOSEC_VER?=v2.27.1
2424
GO_VULNCHECK_VER?=v1.3.0
2525
OSV_SCANNER_VER?=v2.3.8
2626
STATICCHECK_VER?=v0.7.0

‎go.mod‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ require (
66
github.com/Masterminds/semver/v3 v3.5.0
77
github.com/go-git/go-git/v5 v5.19.1
88
github.com/goccy/go-yaml v1.19.2
9-
github.com/regclient/regclient v0.11.4
9+
github.com/regclient/regclient v0.11.5
1010
github.com/spf13/cobra v1.10.2
1111
)
1212

@@ -34,8 +34,8 @@ require (
3434
github.com/spf13/pflag v1.0.10 // indirect
3535
github.com/ulikunitz/xz v0.5.15 // indirect
3636
github.com/xanzy/ssh-agent v0.3.3 // indirect
37-
golang.org/x/crypto v0.52.0 // indirect
37+
golang.org/x/crypto v0.53.0 // indirect
3838
golang.org/x/net v0.55.0 // indirect
39-
golang.org/x/sys v0.45.0 // indirect
39+
golang.org/x/sys v0.46.0 // indirect
4040
gopkg.in/warnings.v0 v0.1.2 // indirect
4141
)

0 commit comments

Comments
 (0)