Skip to content

Commit 41c8dfd

Browse files
salonichf5salonichf5
authored
Merge branch 'main' into dependabot/go_modules/go_modules-dd7da38a6b
2 parents e5794d7 + 82ea29e commit 41c8dfd

File tree

16 files changed

+57
-54
lines changed

16 files changed

+57
-54
lines changed

‎.github/workflows/ci.yml‎

Lines changed: 9 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -30,7 +30,7 @@ jobs:
3030

3131
steps:
3232
- name: Checkout Repository
33-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
33+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
3434
- name: Configure pipeline Variables
3535
id: vars
3636
run: |
@@ -50,7 +50,7 @@ jobs:
5050
runs-on: ubuntu-24.04
5151
steps:
5252
- name: Checkout Repository
53-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
53+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
5454

5555
- name: Setup Golang Environment
5656
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
@@ -86,7 +86,7 @@ jobs:
8686
- 5000:5000
8787
steps:
8888
- name: Checkout Repository
89-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
89+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
9090

9191
- name: Setup Golang Environment
9292
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
@@ -104,7 +104,7 @@ jobs:
104104
if: needs.variables.outputs.forked_workflow == 'false'
105105

106106
- name: Setup QEMU
107-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
107+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
108108

109109
- name: Docker Buildx
110110
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
@@ -150,7 +150,7 @@ jobs:
150150

151151
- name: Docker meta
152152
id: meta
153-
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
153+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
154154
with:
155155
images: |
156156
name=nginx/nginx-prometheus-exporter,enable=${{ github.event_name != 'pull_request' }}
@@ -167,7 +167,7 @@ jobs:
167167
DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
168168

169169
- name: Create/Update Draft
170-
uses: lucacome/draft-release@fd099feb33710d1fa27b915a08a7acd6a1fb7fd2 # v2.0.0
170+
uses: lucacome/draft-release@0ebb400b90474a1b791602046abf8394e9f5402d # v2.0.2
171171
with:
172172
minor-label: "enhancement"
173173
major-label: "change"
@@ -188,13 +188,13 @@ jobs:
188188

189189

190190
- name: Download Syft
191-
uses: anchore/sbom-action/download-syft@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # v0.20.6
191+
uses: anchore/sbom-action/download-syft@fbfd9c6c189226748411491745178e0c2017392d # v0.20.10
192192
if: github.event_name != 'pull_request'
193193

194194
- name: Run GoReleaser
195195
uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
196196
with:
197-
version: v2.12.5 # renovate: datasource=github-tags depName=goreleaser/goreleaser
197+
version: v2.13.1 # renovate: datasource=github-tags depName=goreleaser/goreleaser
198198
args: build --snapshot --clean
199199
env:
200200
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -245,7 +245,7 @@ jobs:
245245
if: github.event_name != 'pull_request'
246246

247247
- name: Upload scan result to GitHub Security tab
248-
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
248+
uses: github/codeql-action/upload-sarif@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
249249
continue-on-error: true
250250
with:
251251
sarif_file: ${{ steps.scan.outputs.sarif }}

‎.github/workflows/codeql-analysis.yml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -45,7 +45,7 @@ jobs:
4545

4646
steps:
4747
- name: Checkout repository
48-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
48+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
4949

5050
- name: Setup Golang Environment
5151
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
@@ -55,7 +55,7 @@ jobs:
5555

5656
# Initializes the CodeQL tools for scanning.
5757
- name: Initialize CodeQL
58-
uses: github/codeql-action/init@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
58+
uses: github/codeql-action/init@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
5959
with:
6060
languages: ${{ matrix.language }}
6161
build-mode: ${{ matrix.build-mode }}
@@ -67,6 +67,6 @@ jobs:
6767
# queries: security-extended,security-and-quality
6868

6969
- name: Perform CodeQL Analysis
70-
uses: github/codeql-action/analyze@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
70+
uses: github/codeql-action/analyze@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
7171
with:
7272
category: "/language:${{matrix.language}}"

‎.github/workflows/dependency-review.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
pull-requests: write # for actions/dependency-review-action to post comments
2020
steps:
2121
- name: Checkout Repository
22-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
22+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2323

2424
- name: Dependency Review
2525
uses: actions/dependency-review-action@40c09b7dc99638e5ddb0bfd91c1673effc064d8a # v4.8.1

‎.github/workflows/dockerhub-description.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -19,7 +19,7 @@ jobs:
1919
runs-on: ubuntu-24.04
2020
if: ${{ github.event.repository.fork == false }}
2121
steps:
22-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
22+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2323

2424
- name: Modify readme for DockerHub
2525
run: |

‎.github/workflows/fossa.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ jobs:
2222
if: ${{ github.event.repository.fork == false }}
2323
steps:
2424
- name: Checkout Repository
25-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
25+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2626

2727
- name: Scan
2828
uses: fossas/fossa-action@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac # v1.7.0

‎.github/workflows/labeler.yml‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -12,7 +12,7 @@ jobs:
1212
pull-requests: write
1313
runs-on: ubuntu-24.04
1414
steps:
15-
- uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
15+
- uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
1616
with:
1717
sparse-checkout: |
1818
labeler.yml

‎.github/workflows/lint.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -22,24 +22,24 @@ jobs:
2222
runs-on: ubuntu-24.04
2323
steps:
2424
- name: Checkout Repository
25-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
25+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2626

2727
- name: Setup Golang Environment
2828
uses: actions/setup-go@44694675825211faa026b3c33043df3e48a5fa00 # v6.0.0
2929
with:
3030
go-version-file: go.mod
3131

3232
- name: Lint Go
33-
uses: golangci/golangci-lint-action@4afd733a84b1f43292c63897423277bb7f4313a9 # v8.0.0
33+
uses: golangci/golangci-lint-action@1e7e51e771db61008b38414a730f564565cf7c20 # v9.2.0
3434
with:
35-
version: v2.5.0 # renovate: datasource=github-tags depName=golangci/golangci-lint
35+
version: v2.7.2 # renovate: datasource=github-tags depName=golangci/golangci-lint
3636

3737
actionlint:
3838
name: Actionlint
3939
runs-on: ubuntu-24.04
4040
steps:
4141
- name: Checkout Repository
42-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
42+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
4343

4444
- name: Lint Actions
4545
uses: reviewdog/action-actionlint@f00ad0691526c10be4021a91b2510f0a769b14d0 # v1.68.0
@@ -51,7 +51,7 @@ jobs:
5151
runs-on: ubuntu-24.04
5252
steps:
5353
- name: Checkout Repository
54-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
54+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
5555

5656
- name: Lint Markdown
5757
uses: DavidAnson/markdownlint-cli2-action@992badcdf24e3b8eb7e87ff9287fe931bcb00c6e # v20.0.0
@@ -65,7 +65,7 @@ jobs:
6565
runs-on: ubuntu-24.04
6666
steps:
6767
- name: Checkout Repository
68-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
68+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
6969

7070
- name: Lint YAML
7171
uses: reviewdog/action-yamllint@f01d8a48fd8d89f89895499fca2cff09f9e9e8c0 # v1.21.0

‎.github/workflows/release.yml‎

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -46,7 +46,7 @@ jobs:
4646
tag: ${{ steps.vars.outputs.tag }}
4747
steps:
4848
- name: Checkout Repository
49-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
49+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
5050
with:
5151
ref: ${{ inputs.branch }}
5252

@@ -68,7 +68,7 @@ jobs:
6868
contents: write
6969
steps:
7070
- name: Checkout Repository
71-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
71+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
7272
with:
7373
ref: ${{ inputs.branch }}
7474
fetch-depth: 0
@@ -116,7 +116,7 @@ jobs:
116116
- 5000:5000
117117
steps:
118118
- name: Checkout Repository
119-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
119+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
120120
with:
121121
ref: ${{ inputs.branch }}
122122
fetch-depth: 0
@@ -136,7 +136,7 @@ jobs:
136136
chmod 600 $HOME/.netrc
137137
138138
- name: Setup QEMU
139-
uses: docker/setup-qemu-action@29109295f81e9208d7d86ff1c6c12d2833863392 # v3.6.0
139+
uses: docker/setup-qemu-action@c7c53464625b32c7a7e944ae62b3e17d2b600130 # v3.7.0
140140

141141
- name: Docker Buildx
142142
uses: docker/setup-buildx-action@e468171a9de216ec08956ac3ada2f0791b6bd435 # v3.11.1
@@ -177,7 +177,7 @@ jobs:
177177

178178
- name: Docker meta
179179
id: meta
180-
uses: docker/metadata-action@c1e51972afc2121e065aed6d45c65596fe445f3f # v5.8.0
180+
uses: docker/metadata-action@c299e40c65443455700f0fdfc63efafe5b349051 # v5.10.0
181181
with:
182182
images: |
183183
name=nginx/nginx-prometheus-exporter,enable=true
@@ -193,7 +193,7 @@ jobs:
193193
DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index
194194

195195
- name: Create/Update Draft
196-
uses: lucacome/draft-release@fd099feb33710d1fa27b915a08a7acd6a1fb7fd2 # v2.0.0
196+
uses: lucacome/draft-release@0ebb400b90474a1b791602046abf8394e9f5402d # v2.0.2
197197
with:
198198
minor-label: "enhancement"
199199
major-label: "change"
@@ -212,20 +212,20 @@ jobs:
212212
- NGINX Plus R19 or newer.
213213
214214
- name: Download Syft
215-
uses: anchore/sbom-action/download-syft@f8bdd1d8ac5e901a77a92f111440fdb1b593736b # v0.20.6
215+
uses: anchore/sbom-action/download-syft@fbfd9c6c189226748411491745178e0c2017392d # v0.20.10
216216

217217
- name: Install Cosign
218218
uses: sigstore/cosign-installer@faadad0cce49287aee09b3a48701e75088a2c6ad # v4.0.0
219219

220220
- name: Install Nix
221-
uses: cachix/install-nix-action@9280e7aca88deada44c930f1e2c78e21c3ae3edd # v31
221+
uses: cachix/install-nix-action@0b0e072294b088b73964f1d72dfdac0951439dbd # v31
222222
with:
223223
github_access_token: ${{ secrets.GITHUB_TOKEN }}
224224

225225
- name: Run GoReleaser
226226
uses: goreleaser/goreleaser-action@e435ccd777264be153ace6237001ef4d979d3a7a # v6.4.0
227227
with:
228-
version: v2.12.5 # renovate: datasource=github-tags depName=goreleaser/goreleaser
228+
version: v2.13.1 # renovate: datasource=github-tags depName=goreleaser/goreleaser
229229
args: ${{ inputs.dry_run && 'build --snapshot' || 'release' }} --clean ${{ inputs.goreleaser_args }}
230230
env:
231231
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
@@ -276,7 +276,7 @@ jobs:
276276
if: ${{ !inputs.dry_run }}
277277

278278
- name: Upload scan result to GitHub Security tab
279-
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
279+
uses: github/codeql-action/upload-sarif@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
280280
continue-on-error: true
281281
with:
282282
sarif_file: ${{ steps.scan.outputs.sarif }}

‎.github/workflows/scorecards.yml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -25,7 +25,7 @@ jobs:
2525

2626
steps:
2727
- name: "Checkout code"
28-
uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0
28+
uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1
2929
with:
3030
persist-credentials: false
3131

@@ -56,6 +56,6 @@ jobs:
5656

5757
# Upload the results to GitHub's code scanning dashboard.
5858
- name: "Upload to code-scanning"
59-
uses: github/codeql-action/upload-sarif@4e94bd11f71e507f7f87df81788dff88d1dacbfb # v4.31.0
59+
uses: github/codeql-action/upload-sarif@fe4161a26a8629af62121b670040955b330f9af2 # v4.31.6
6060
with:
6161
sarif_file: results.sarif

‎.pre-commit-config.yaml‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -26,12 +26,12 @@ repos:
2626
- id: fix-byte-order-marker
2727

2828
- repo: https://github.com/golangci/golangci-lint
29-
rev: v2.5.0
29+
rev: v2.7.2
3030
hooks:
3131
- id: golangci-lint-full
3232

3333
- repo: https://github.com/gitleaks/gitleaks
34-
rev: v8.28.0
34+
rev: v8.30.0
3535
hooks:
3636
- id: gitleaks
3737

0 commit comments

Comments
 (0)