From b81f9a6779d78faae1d155742fa343ff54ec9497 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 9 Jul 2026 03:45:25 +0000 Subject: [PATCH] Bump the all group across 1 directory with 8 updates Bumps the all group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [step-security/harden-runner](https://github.com/step-security/harden-runner) | `2.19.4` | `2.20.0` | | [chainguard-dev/actions/boilerplate](https://github.com/chainguard-dev/actions) | `1.6.25` | `1.6.26` | | [chainguard-dev/actions/donotsubmit](https://github.com/chainguard-dev/actions) | `1.6.25` | `1.6.26` | | [chainguard-dev/actions/gofmt](https://github.com/chainguard-dev/actions) | `1.6.25` | `1.6.26` | | [chainguard-dev/actions/goimports](https://github.com/chainguard-dev/actions) | `1.6.25` | `1.6.26` | | [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `9.2.1` | `9.3.0` | | [chainguard-dev/actions/trailing-space](https://github.com/chainguard-dev/actions) | `1.6.25` | `1.6.26` | | [chainguard-dev/actions/eof-newline](https://github.com/chainguard-dev/actions) | `1.6.25` | `1.6.26` | Updates `step-security/harden-runner` from 2.19.4 to 2.20.0 - [Release notes](https://github.com/step-security/harden-runner/releases) - [Commits](https://github.com/step-security/harden-runner/compare/9af89fc71515a100421586dfdb3dc9c984fbf411...bf7454d06d71f1098171f2acdf0cd4708d7b5920) Updates `chainguard-dev/actions/boilerplate` from 1.6.25 to 1.6.26 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/e1c4977ad9cb32b12c5b222ec0134a22bec60bd5...f0be69916b439d0fcced2451b23d0f27cd46d545) Updates `chainguard-dev/actions/donotsubmit` from 1.6.25 to 1.6.26 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/e1c4977ad9cb32b12c5b222ec0134a22bec60bd5...f0be69916b439d0fcced2451b23d0f27cd46d545) Updates `chainguard-dev/actions/gofmt` from 1.6.25 to 1.6.26 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/e1c4977ad9cb32b12c5b222ec0134a22bec60bd5...f0be69916b439d0fcced2451b23d0f27cd46d545) Updates `chainguard-dev/actions/goimports` from 1.6.25 to 1.6.26 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/e1c4977ad9cb32b12c5b222ec0134a22bec60bd5...f0be69916b439d0fcced2451b23d0f27cd46d545) Updates `golangci/golangci-lint-action` from 9.2.1 to 9.3.0 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](https://github.com/golangci/golangci-lint-action/compare/82606bf257cbaff209d206a39f5134f0cfbfd2ee...ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a) Updates `chainguard-dev/actions/trailing-space` from 1.6.25 to 1.6.26 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/e1c4977ad9cb32b12c5b222ec0134a22bec60bd5...f0be69916b439d0fcced2451b23d0f27cd46d545) Updates `chainguard-dev/actions/eof-newline` from 1.6.25 to 1.6.26 - [Release notes](https://github.com/chainguard-dev/actions/releases) - [Commits](https://github.com/chainguard-dev/actions/compare/e1c4977ad9cb32b12c5b222ec0134a22bec60bd5...f0be69916b439d0fcced2451b23d0f27cd46d545) --- updated-dependencies: - dependency-name: step-security/harden-runner dependency-version: 2.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: chainguard-dev/actions/boilerplate dependency-version: 1.6.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: chainguard-dev/actions/donotsubmit dependency-version: 1.6.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: chainguard-dev/actions/gofmt dependency-version: 1.6.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: chainguard-dev/actions/goimports dependency-version: 1.6.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: golangci/golangci-lint-action dependency-version: 9.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: chainguard-dev/actions/trailing-space dependency-version: 1.6.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: chainguard-dev/actions/eof-newline dependency-version: 1.6.26 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] --- .github/workflows/actionlint.yaml | 2 +- .github/workflows/boilerplate.yaml | 4 ++-- .github/workflows/donotsubmit.yaml | 4 ++-- .github/workflows/go-test.yaml | 2 +- .github/workflows/presubmit-testing.yaml | 2 +- .github/workflows/style.yaml | 18 +++++++++--------- .github/workflows/zizmor.yaml | 2 +- 7 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/actionlint.yaml b/.github/workflows/actionlint.yaml index 747e942..b048a24 100644 --- a/.github/workflows/actionlint.yaml +++ b/.github/workflows/actionlint.yaml @@ -18,7 +18,7 @@ jobs: name: Action lint runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: block allowed-endpoints: > diff --git a/.github/workflows/boilerplate.yaml b/.github/workflows/boilerplate.yaml index b04ccb7..9d42611 100644 --- a/.github/workflows/boilerplate.yaml +++ b/.github/workflows/boilerplate.yaml @@ -36,7 +36,7 @@ jobs: language: YAML steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -45,7 +45,7 @@ jobs: with: persist-credentials: false - - uses: chainguard-dev/actions/boilerplate@e1c4977ad9cb32b12c5b222ec0134a22bec60bd5 # v1.6.25 + - uses: chainguard-dev/actions/boilerplate@f0be69916b439d0fcced2451b23d0f27cd46d545 # v1.6.26 with: extension: ${{ matrix.extension }} language: ${{ matrix.language }} diff --git a/.github/workflows/donotsubmit.yaml b/.github/workflows/donotsubmit.yaml index 227e3ab..897c3b6 100644 --- a/.github/workflows/donotsubmit.yaml +++ b/.github/workflows/donotsubmit.yaml @@ -20,7 +20,7 @@ jobs: contents: read steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -30,4 +30,4 @@ jobs: persist-credentials: false - name: Do Not Submit - uses: chainguard-dev/actions/donotsubmit@e1c4977ad9cb32b12c5b222ec0134a22bec60bd5 # v1.6.25 + uses: chainguard-dev/actions/donotsubmit@f0be69916b439d0fcced2451b23d0f27cd46d545 # v1.6.26 diff --git a/.github/workflows/go-test.yaml b/.github/workflows/go-test.yaml index cd9c697..a96c55a 100644 --- a/.github/workflows/go-test.yaml +++ b/.github/workflows/go-test.yaml @@ -20,7 +20,7 @@ jobs: contents: read # for actions/checkout to fetch code runs-on: ubuntu-latest steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/presubmit-testing.yaml b/.github/workflows/presubmit-testing.yaml index 59e6b20..2b70bee 100644 --- a/.github/workflows/presubmit-testing.yaml +++ b/.github/workflows/presubmit-testing.yaml @@ -20,7 +20,7 @@ jobs: id-token: write steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit diff --git a/.github/workflows/style.yaml b/.github/workflows/style.yaml index bba223c..90e18c7 100644 --- a/.github/workflows/style.yaml +++ b/.github/workflows/style.yaml @@ -23,7 +23,7 @@ jobs: contents: read steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -38,7 +38,7 @@ jobs: go-version-file: './go.mod' check-latest: true - - uses: chainguard-dev/actions/gofmt@e1c4977ad9cb32b12c5b222ec0134a22bec60bd5 # v1.6.25 + - uses: chainguard-dev/actions/gofmt@f0be69916b439d0fcced2451b23d0f27cd46d545 # v1.6.26 with: args: -s @@ -50,7 +50,7 @@ jobs: contents: read steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -65,7 +65,7 @@ jobs: go-version-file: './go.mod' check-latest: true - - uses: chainguard-dev/actions/goimports@e1c4977ad9cb32b12c5b222ec0134a22bec60bd5 # v1.6.25 + - uses: chainguard-dev/actions/goimports@f0be69916b439d0fcced2451b23d0f27cd46d545 # v1.6.26 golangci-lint: name: golangci-lint @@ -76,7 +76,7 @@ jobs: pull-requests: read steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -91,7 +91,7 @@ jobs: check-latest: true - name: golangci-lint - uses: golangci/golangci-lint-action@82606bf257cbaff209d206a39f5134f0cfbfd2ee # v9.2.1 + uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0 with: version: v2.8 @@ -103,7 +103,7 @@ jobs: contents: read steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: audit @@ -118,10 +118,10 @@ jobs: go-version-file: './go.mod' check-latest: true - - uses: chainguard-dev/actions/trailing-space@e1c4977ad9cb32b12c5b222ec0134a22bec60bd5 # v1.6.25 + - uses: chainguard-dev/actions/trailing-space@f0be69916b439d0fcced2451b23d0f27cd46d545 # v1.6.26 if: ${{ always() }} - - uses: chainguard-dev/actions/eof-newline@e1c4977ad9cb32b12c5b222ec0134a22bec60bd5 # v1.6.25 + - uses: chainguard-dev/actions/eof-newline@f0be69916b439d0fcced2451b23d0f27cd46d545 # v1.6.26 if: ${{ always() }} - uses: step-security/action-tflint@285fe25934512644274b253b424a5d4b8f1c2dc5 # v1.25.0 diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index 88b2b2c..5221a0c 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -30,7 +30,7 @@ jobs: contents: read # Clone the repository security-events: write # Upload SARIF results to Code Scanning steps: - - uses: step-security/harden-runner@9af89fc71515a100421586dfdb3dc9c984fbf411 # v2.19.4 + - uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 with: egress-policy: block allowed-endpoints: >