Merge pull request #129 from SovereignCloudStack/renovate/patch-github-actions

🌱 Update github-actions group (patch)

Author: kranurag7

.builder-image-version.txt

@@ -1 +1 @@
-1.1.5
+1.1.6

.github/actions/setup-go/action.yaml

@@ -4,7 +4,7 @@ runs:
  using: "composite"
  steps:
  - name: Install go
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: "go.mod"
  cache: true

.github/workflows/build.yml

@@ -65,7 +65,7 @@ jobs:
 
  # Load Golang cache build from GitHub
  - name: Load cso Golang cache build from GitHub
- uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v4.0.1
+ uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
  id: cache
  with:
  path: /tmp/.cache/cso
@@ -120,7 +120,7 @@ jobs:
 
  # Upload artifact digests
  - name: Upload artifact digests
- uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+ uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
  with:
  name: image-digest
  path: image-digest

.github/workflows/pr-lint.yml

@@ -21,13 +21,13 @@ jobs:
  if: github.event_name != 'pull_request' || !github.event.pull_request.draft
  runs-on: ubuntu-latest
  container:
- image: ghcr.io/sovereigncloudstack/cso-builder:1.1.5
+ image: ghcr.io/sovereigncloudstack/cso-builder:1.1.6
  credentials:
  username: ${{ github.actor }}
  password: ${{ secrets.github_token }}
  steps:
  - name: Checkout repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
  with:
  ref: ${{ github.event.pull_request.head.sha }}
 

.github/workflows/pr-verify.yml

@@ -16,7 +16,7 @@ jobs:
  github_token: ${{ secrets.GITHUB_TOKEN }}
 
  - name: Checkout repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
  with:
  ref: ${{ github.event.pull_request.head.sha }}
 

.github/workflows/release.yml

@@ -106,7 +106,7 @@ jobs:
 
  # Upload artifact digests
  - name: Upload artifact digests
- uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
+ uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
  with:
  name: image-digest cso
  path: image-digest
@@ -140,7 +140,7 @@ jobs:
  fetch-depth: 0
 
  - name: Install go
- uses: actions/setup-go@0c52d547c9bc32b1aa3301fd7a9cb496313a4491 # v5.0.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: "go.mod"
  cache: true

.github/workflows/schedule-cache-cleaner-cso-image.yml

@@ -15,7 +15,7 @@ jobs:
  steps:
  # Load Golang cache build from GitHub
  - name: Load cso Golang cache build from GitHub
- uses: actions/cache@ab5e6d0c87105b4c9c2047343972218f562e4319 # v4.0.1
+ uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
  id: cache
  with:
  path: /tmp/.cache/cso

.github/workflows/schedule-scan-image.yml

@@ -9,13 +9,13 @@ jobs:
  name: Trivy
  runs-on: ubuntu-latest
  container:
- image: ghcr.io/sovereigncloudstack/cso-builder:1.1.5
+ image: ghcr.io/sovereigncloudstack/cso-builder:1.1.6
  credentials:
  username: ${{ github.actor }}
  password: ${{ secrets.github_token }}
  steps:
  - name: Checkout repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
  - name: Fixup git permissions
  # https://github.com/actions/checkout/issues/766
  shell: bash

.github/workflows/schedule-update-bot.yaml

@@ -30,7 +30,7 @@ jobs:
  runs-on: ubuntu-latest
  steps:
  - name: Checkout
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
 
  - name: Generate Token
  uses: actions/create-github-app-token@f2acddfb5195534d487896a656232b016a682f3c # v1
@@ -45,7 +45,7 @@ jobs:
  echo "LOG_LEVEL=${{ github.event.inputs.logLevel || env.LOG_LEVEL }}" >> "$GITHUB_ENV"
 
  - name: Renovate
- uses: renovatebot/github-action@c134f38c01867794a23c35e86660bd9609caf30c # v40.1.4
+ uses: renovatebot/github-action@063e0c946b9c1af35ef3450efc44114925d6e8e6 # v40.1.11
  env:
  RENOVATE_HOST_RULES: '[{"hostType": "docker", "matchHost": "ghcr.io", "username": "${{ github.actor }}", "password": "${{ secrets.GITHUB_TOKEN }}" }]'
  RENOVATE_ALLOWED_POST_UPGRADE_COMMANDS: '[".*"]'

.github/workflows/test.yml

@@ -30,7 +30,7 @@ jobs:
  timeout-minutes: 10
  steps:
  - name: Checkout repository
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
+ uses: actions/checkout@0ad4b8fadaa221de15dcec353f45205ec38ea70b # v4.1.4
  - name: Coverage result name
  id: name
  run: |