From 1572d94e1858233033084b21a2f142f616793546 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 24 Sep 2026 07:05:51 +0000 Subject: [PATCH] chore(deps): bump the github-actions group across 1 directory with 5 updates Bumps the github-actions group with 5 updates in the / directory: | Package | From | To | | --- | --- | --- | | [devr-tools/codeguard](https://github.com/devr-tools/codeguard) | `1.5.0` | `1.10.0` | | [Homebrew/actions/setup-homebrew](https://github.com/homebrew/actions) | `2026.08.14.1` | `2026.09.21.1` | | [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) | `4.2.0` | `4.4.0` | | [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) | `4.3.0` | `4.4.1` | | [anchore/sbom-action/download-syft](https://github.com/anchore/sbom-action) | `0.24.0` | `0.24.2` | Updates `devr-tools/codeguard` from 1.5.0 to 1.10.0 - [Release notes](https://github.com/devr-tools/codeguard/releases) - [Changelog](https://github.com/devr-tools/codeguard/blob/main/CHANGELOG.md) - [Commits](https://github.com/devr-tools/codeguard/compare/8d9ea157e0de725dfa74ee954be9f4ef6157d9f1...05b9c78421bb7cd13a953f5441a6cd8f7a58815f) Updates `Homebrew/actions/setup-homebrew` from 2026.08.14.1 to 2026.09.21.1 - [Release notes](https://github.com/homebrew/actions/releases) - [Changelog](https://github.com/Homebrew/actions/blob/main/release.test.mts) - [Commits](https://github.com/homebrew/actions/compare/8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4...848c272c7bfe984a197bd4d16383f4c106ec61e6) Updates `docker/setup-qemu-action` from 4.2.0 to 4.4.0 - [Release notes](https://github.com/docker/setup-qemu-action/releases) - [Commits](https://github.com/docker/setup-qemu-action/compare/96fe6ef7f33517b61c61be40b68a1882f3264fb8...99012661954931238ded8c8b007157a8430204e1) Updates `docker/setup-buildx-action` from 4.3.0 to 4.4.1 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/37fe631027851001ddb9b187196cc803df7f5f0e...f87e5991a6d7451dcb8d9637bfbc97413f497069) Updates `anchore/sbom-action/download-syft` from 0.24.0 to 0.24.2 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/e22c389904149dbc22b58101806040fa8d37a610...3ad7283483fc7af8ff2b4ea19663c2d5ca935e26) --- updated-dependencies: - dependency-name: devr-tools/codeguard dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: Homebrew/actions/setup-homebrew dependency-version: 2026.09.21.1 dependency-type: direct:production dependency-group: github-actions - dependency-name: docker/setup-qemu-action dependency-version: 4.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anchore/sbom-action/download-syft dependency-version: 0.24.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci.yml | 2 +- .github/workflows/homebrew-validation.yml | 2 +- .github/workflows/release.yml | 6 +++--- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index 2de907f..2a21ede 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -85,7 +85,7 @@ jobs: - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 # make codeguard-ci: CI intentionally runs the stable Marketplace action instead of the in-repo binary. - - uses: devr-tools/codeguard@8d9ea157e0de725dfa74ee954be9f4ef6157d9f1 + - uses: devr-tools/codeguard@05b9c78421bb7cd13a953f5441a6cd8f7a58815f with: config: .codeguard/codeguard.yaml diff --git a/.github/workflows/homebrew-validation.yml b/.github/workflows/homebrew-validation.yml index c3bac26..eba0239 100644 --- a/.github/workflows/homebrew-validation.yml +++ b/.github/workflows/homebrew-validation.yml @@ -25,7 +25,7 @@ jobs: uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7 - name: Set up Homebrew - uses: Homebrew/actions/setup-homebrew@8f3d1ec8a696b3b9d9a6c3696b6c73033cab69e4 # main + uses: Homebrew/actions/setup-homebrew@848c272c7bfe984a197bd4d16383f4c106ec61e6 # main - name: Clone Homebrew tap shell: bash diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6ff4d43..401081b 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -169,10 +169,10 @@ jobs: go-version-file: go.mod - name: Set up QEMU - uses: docker/setup-qemu-action@96fe6ef7f33517b61c61be40b68a1882f3264fb8 # v4 + uses: docker/setup-qemu-action@99012661954931238ded8c8b007157a8430204e1 # v4 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4 + uses: docker/setup-buildx-action@f87e5991a6d7451dcb8d9637bfbc97413f497069 # v4 - name: Install cosign uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2 @@ -185,7 +185,7 @@ jobs: cosign-release: v2.6.3 - name: Install syft (SBOM generation) - uses: anchore/sbom-action/download-syft@e22c389904149dbc22b58101806040fa8d37a610 # v0 + uses: anchore/sbom-action/download-syft@3ad7283483fc7af8ff2b4ea19663c2d5ca935e26 # v0.24.2 - name: Log in to GHCR uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4