Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump actions/setup-go from 3.5.0 to 4.0.0 #114

Merged
merged 1 commit into from
Mar 20, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 20, 2023

Bumps actions/setup-go from 3.5.0 to 4.0.0.

Release notes

Sourced from actions/setup-go's releases.

v4.0.0

In scope of release we enable cache by default. The action won’t throw an error if the cache can’t be restored or saved. The action will throw a warning message but it won’t stop a build process. The cache can be disabled by specifying cache: false.

steps:
  - uses: actions/checkout@v3
  - uses: actions/setup-go@v4
    with:
      go-version: ‘1.19’
  - run: go run hello.go

Besides, we introduce such changes as

Commits
  • 4d34df0 Update configuration files (#348)
  • fdc0d67 Add Go bin if go-version input is empty (#351)
  • ebfdf6a add warning if go-version is empty (#350)
  • b27d769 fix lockfileVersion (#349)
  • c51a720 Enable caching by default with default input (#332)
  • 6b848af Merge pull request #343 from akv-platform/reusable-workflow
  • 12741cc Format update-config-files.yml
  • 7a77a6a Merge branch 'main' into reusable-workflow
  • 42a0cc8 Add update-config-files.yml
  • 7406d65 Add and configure ESLint and update configuration for Prettier (#341)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Mar 20, 2023
cpanato
cpanato previously approved these changes Mar 20, 2023
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3.5.0 to 4.0.0.
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@6edd440...4d34df0)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/github_actions/actions/setup-go-4.0.0 branch from fbd4dc0 to c47247a Compare March 20, 2023 06:26
@cpanato cpanato merged commit 00bf136 into main Mar 20, 2023
@cpanato cpanato deleted the dependabot/github_actions/actions/setup-go-4.0.0 branch March 20, 2023 07:51
ianlewis referenced this pull request in slsa-framework/slsa-github-generator Apr 10, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/checkout](https://github.com/actions/checkout) | action |
minor | `v3.3.0` -> `v3.5.0` |
| [github/codeql-action](https://github.com/github/codeql-action) |
action | patch | `v2.2.9` -> `v2.2.11` |
|
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
| action | patch | `v3.0.1` -> `v3.0.2` |

---

### ⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.

---

### Release Notes

<details>
<summary>actions/checkout</summary>

###
[`v3.5.0`](https://github.com/actions/checkout/releases/tag/v3.5.0)

[Compare
Source](https://github.com/actions/checkout/compare/v3.4.0...v3.5.0)

#### What's Changed

- Add new public key for known_hosts by
[@&#8203;cdb](https://github.com/cdb) in
[https://github.com/actions/checkout/pull/1237](https://github.com/actions/checkout/pull/1237)

#### New Contributors

- [@&#8203;cdb](https://github.com/cdb) made their first contribution
in
[https://github.com/actions/checkout/pull/1237](https://github.com/actions/checkout/pull/1237)

**Full Changelog**:
actions/checkout@v3.4.0...v3.5.0

###
[`v3.4.0`](https://github.com/actions/checkout/blob/HEAD/CHANGELOG.md#v340)

[Compare
Source](https://github.com/actions/checkout/compare/v3.3.0...v3.4.0)

- [Upgrade codeql actions to
v2](https://github.com/actions/checkout/pull/1209)
- [Upgrade
dependencies](https://github.com/actions/checkout/pull/1210)
- [Upgrade
@&#8203;actions/io](https://github.com/actions/checkout/pull/1225)

</details>

<details>
<summary>github/codeql-action</summary>

###
[`v2.2.11`](https://github.com/github/codeql-action/compare/v2.2.10...v2.2.11)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.2.10...v2.2.11)

###
[`v2.2.10`](https://github.com/github/codeql-action/compare/v2.2.9...v2.2.10)

[Compare
Source](https://github.com/github/codeql-action/compare/v2.2.9...v2.2.10)

</details>

<details>
<summary>sigstore/cosign-installer</summary>

###
[`v3.0.2`](https://github.com/sigstore/cosign-installer/releases/tag/v3.0.2)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.0.1...v3.0.2)

##### What's Changed

- add --yes to example workflow by
[@&#8203;sebhoss](https://github.com/sebhoss) in
[https://github.com/sigstore/cosign-installer/pull/110](https://github.com/sigstore/cosign-installer/pull/110)
- Fix aarch64 action run by
[@&#8203;ananos](https://github.com/ananos) in
[https://github.com/sigstore/cosign-installer/pull/113](https://github.com/sigstore/cosign-installer/pull/113)
- Bump actions/checkout from 3.3.0 to 3.4.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/sigstore/cosign-installer/pull/115](https://github.com/sigstore/cosign-installer/pull/115)
- Bump actions/setup-go from 3.5.0 to 4.0.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/sigstore/cosign-installer/pull/114](https://github.com/sigstore/cosign-installer/pull/114)
- Bump actions/checkout from 3.4.0 to 3.5.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/sigstore/cosign-installer/pull/116](https://github.com/sigstore/cosign-installer/pull/116)
- default cosign to v2.0.1 by
[@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/117](https://github.com/sigstore/cosign-installer/pull/117)

##### New Contributors

- [@&#8203;sebhoss](https://github.com/sebhoss) made their first
contribution in
[https://github.com/sigstore/cosign-installer/pull/110](https://github.com/sigstore/cosign-installer/pull/110)
- [@&#8203;ananos](https://github.com/ananos) made their first
contribution in
[https://github.com/sigstore/cosign-installer/pull/113](https://github.com/sigstore/cosign-installer/pull/113)

**Full Changelog**:
sigstore/cosign-installer@v3...v3.0.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "every weekend" (UTC), Automerge - At
any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://app.renovatebot.com/dashboard#github/slsa-framework/slsa-github-generator).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNS4zMS40IiwidXBkYXRlZEluVmVyIjoiMzUuMzEuNCJ9-->

Signed-off-by: Renovate Bot <[email protected]>
Racer159 referenced this pull request in zarf-dev/zarf Dec 19, 2023
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
| action | major | `v2.8.1` -> `v3.3.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>sigstore/cosign-installer (sigstore/cosign-installer)</summary>

###
[`v3.3.0`](https://github.com/sigstore/cosign-installer/releases/tag/v3.3.0)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.2.0...v3.3.0)

#### What's Changed

- Bump actions/setup-go from 4.1.0 to 5.0.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/sigstore/cosign-installer/pull/152](https://github.com/sigstore/cosign-installer/pull/152)
- update action to use latest cosign v2.2.2 by
[@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/153](https://github.com/sigstore/cosign-installer/pull/153)

**Full Changelog**:
sigstore/cosign-installer@v3.2.0...v3.3.0

###
[`v3.2.0`](https://github.com/sigstore/cosign-installer/releases/tag/v3.2.0)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.1.2...v3.2.0)

**Note: This release comes with a fix for CVE-2023-46737 described in
this [Github Security
Advisory](https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9).
Please upgrade to this release ASAP**

see https://github.com/sigstore/cosign/releases/tag/v2.2.1

#### What's Changed

- Support the runner context of gitea act by
[@&#8203;josedev-union](https://github.com/josedev-union) in
[https://github.com/sigstore/cosign-installer/pull/147](https://github.com/sigstore/cosign-installer/pull/147)
- bump cosign to v2.2.1 by
[@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/148](https://github.com/sigstore/cosign-installer/pull/148)
- test with latest go version by
[@&#8203;bobcallaway](https://github.com/bobcallaway) in
[https://github.com/sigstore/cosign-installer/pull/150](https://github.com/sigstore/cosign-installer/pull/150)

#### New Contributors

- [@&#8203;josedev-union](https://github.com/josedev-union) made their
first contribution in
[https://github.com/sigstore/cosign-installer/pull/147](https://github.com/sigstore/cosign-installer/pull/147)

**Full Changelog**:
sigstore/cosign-installer@v3...v3.2.0

###
[`v3.1.2`](https://github.com/sigstore/cosign-installer/releases/tag/v3.1.2)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.1.1...v3.1.2)

#### What's Changed

- Fix build and push step Readme missing id by
[@&#8203;hbenali](https://github.com/hbenali) in
[https://github.com/sigstore/cosign-installer/pull/138](https://github.com/sigstore/cosign-installer/pull/138)
- bump cosign to v2.2.0 by
[@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/142](https://github.com/sigstore/cosign-installer/pull/142)

#### New Contributors

- [@&#8203;hbenali](https://github.com/hbenali) made their first
contribution in
[https://github.com/sigstore/cosign-installer/pull/138](https://github.com/sigstore/cosign-installer/pull/138)

**Full Changelog**:
sigstore/cosign-installer@v3...v3.1.2

###
[`v3.1.1`](https://github.com/sigstore/cosign-installer/releases/tag/v3.1.1)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.1.0...v3.1.1)

#### What's Changed

- default cosign to v2.1.1 by
[@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/137](https://github.com/sigstore/cosign-installer/pull/137)

**Full Changelog**:
sigstore/cosign-installer@v3.1.0...v3.1.1

###
[`v3.1.0`](https://github.com/sigstore/cosign-installer/releases/tag/v3.1.0)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.0.5...v3.1.0)

#### What's Changed

- update job to use latest action release by
[@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/130](https://github.com/sigstore/cosign-installer/pull/130)
- Update action example for keyless signing as xarg is not required by
[@&#8203;jbtrystram](https://github.com/jbtrystram) in
[https://github.com/sigstore/cosign-installer/pull/132](https://github.com/sigstore/cosign-installer/pull/132)
- update examples by [@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/133](https://github.com/sigstore/cosign-installer/pull/133)
- bump cosign to default to release v2.1.0 and update docs by
[@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/136](https://github.com/sigstore/cosign-installer/pull/136)

#### New Contributors

- [@&#8203;jbtrystram](https://github.com/jbtrystram) made their first
contribution in
[https://github.com/sigstore/cosign-installer/pull/132](https://github.com/sigstore/cosign-installer/pull/132)

**Full Changelog**:
sigstore/cosign-installer@v3.0.5...v3.1.0

###
[`v3.0.5`](https://github.com/sigstore/cosign-installer/releases/tag/v3.0.5)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.0.4...v3.0.5)

#### What's Changed

- download cosign releases from GitHub rather than GCS by
[@&#8203;bobcallaway](https://github.com/bobcallaway) in
[https://github.com/sigstore/cosign-installer/pull/126](https://github.com/sigstore/cosign-installer/pull/126)

**Full Changelog**:
sigstore/cosign-installer@v3.0.4...v3.0.5

###
[`v3.0.4`](https://github.com/sigstore/cosign-installer/releases/tag/v3.0.4)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.0.3...v3.0.4)

- Include fix for
[https://github.com/sigstore/cosign-installer/pull/124](https://github.com/sigstore/cosign-installer/pull/124)
- changes download URL for `cosign` binary to github.com instead of GCS

###
[`v3.0.3`](https://github.com/sigstore/cosign-installer/releases/tag/v3.0.3)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.0.2...v3.0.3)

##### What's Changed

- bump to cosign v2.0.2 by
[@&#8203;bobcallaway](https://github.com/bobcallaway) in
[https://github.com/sigstore/cosign-installer/pull/119](https://github.com/sigstore/cosign-installer/pull/119)
- changes download URL for `cosign` binary to github.com instead of GCS

**Full Changelog**:
sigstore/cosign-installer@v3.0.2...v3.0.3

###
[`v3.0.2`](https://github.com/sigstore/cosign-installer/releases/tag/v3.0.2)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.0.1...v3.0.2)

##### What's Changed

- add --yes to example workflow by
[@&#8203;sebhoss](https://github.com/sebhoss) in
[https://github.com/sigstore/cosign-installer/pull/110](https://github.com/sigstore/cosign-installer/pull/110)
- Fix aarch64 action run by
[@&#8203;ananos](https://github.com/ananos) in
[https://github.com/sigstore/cosign-installer/pull/113](https://github.com/sigstore/cosign-installer/pull/113)
- Bump actions/checkout from 3.3.0 to 3.4.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/sigstore/cosign-installer/pull/115](https://github.com/sigstore/cosign-installer/pull/115)
- Bump actions/setup-go from 3.5.0 to 4.0.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/sigstore/cosign-installer/pull/114](https://github.com/sigstore/cosign-installer/pull/114)
- Bump actions/checkout from 3.4.0 to 3.5.0 by
[@&#8203;dependabot](https://github.com/dependabot) in
[https://github.com/sigstore/cosign-installer/pull/116](https://github.com/sigstore/cosign-installer/pull/116)
- default cosign to v2.0.1 by
[@&#8203;cpanato](https://github.com/cpanato) in
[https://github.com/sigstore/cosign-installer/pull/117](https://github.com/sigstore/cosign-installer/pull/117)
- changes download URL for `cosign` binary to github.com instead of GCS

##### New Contributors

- [@&#8203;sebhoss](https://github.com/sebhoss) made their first
contribution in
[https://github.com/sigstore/cosign-installer/pull/110](https://github.com/sigstore/cosign-installer/pull/110)
- [@&#8203;ananos](https://github.com/ananos) made their first
contribution in
[https://github.com/sigstore/cosign-installer/pull/113](https://github.com/sigstore/cosign-installer/pull/113)

**Full Changelog**:
sigstore/cosign-installer@v3...v3.0.2

###
[`v3.0.1`](https://github.com/sigstore/cosign-installer/releases/tag/v3.0.1)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v3.0.0...v3.0.1)

##### What's Changed

- make cosign v2.0.0 default version by
[@&#8203;developer-guy](https://github.com/developer-guy) in
[https://github.com/sigstore/cosign-installer/pull/109](https://github.com/sigstore/cosign-installer/pull/109)
- changes download URL for `cosign` binary to github.com instead of GCS

**Full Changelog**:
sigstore/cosign-installer@v3.0.0...v3.0.1

###
[`v3.0.0`](https://github.com/sigstore/cosign-installer/releases/tag/v3.0.0)

[Compare
Source](https://github.com/sigstore/cosign-installer/compare/v2.8.1...v3.0.0)

##### Breaking change

Cosign v2 has some breaking changes. Please check those:
https://blog.sigstore.dev/cosign-2-0-released/

##### What's Changed

- test: add logs when downloading the public keys by
[@&#8203;hectorj2f](https://github.com/hectorj2f) in
[https://github.com/sigstore/cosign-installer/pull/106](https://github.com/sigstore/cosign-installer/pull/106)
- Add support to install v2 and any other cosign release candidate by
[@&#8203;hectorj2f](https://github.com/hectorj2f) in
[https://github.com/sigstore/cosign-installer/pull/105](https://github.com/sigstore/cosign-installer/pull/105)
- v2.0.0 release by [@&#8203;sabre1041](https://github.com/sabre1041)
in
[https://github.com/sigstore/cosign-installer/pull/108](https://github.com/sigstore/cosign-installer/pull/108)
- changes download URL for `cosign` binary to github.com instead of GCS

##### New Contributors

- [@&#8203;hectorj2f](https://github.com/hectorj2f) made their first
contribution in
[https://github.com/sigstore/cosign-installer/pull/106](https://github.com/sigstore/cosign-installer/pull/106)
- [@&#8203;sabre1041](https://github.com/sabre1041) made their first
contribution in
[https://github.com/sigstore/cosign-installer/pull/108](https://github.com/sigstore/cosign-installer/pull/108)

**Full Changelog**:
sigstore/cosign-installer@v2...v3.0.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/defenseunicorns/zarf).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNC4xNTMuMiIsInVwZGF0ZWRJblZlciI6IjM3Ljg3LjIiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant