From df1146b5b95f6086a1588bb232018db9e2c26e98 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 30 Dec 2024 13:36:54 +0000 Subject: [PATCH] build(deps): bump the actions group with 3 updates Bumps the actions group with 3 updates: [actions/checkout](https://github.com/actions/checkout), [actions/setup-go](https://github.com/actions/setup-go) and [kubernetes-sigs/release-actions](https://github.com/kubernetes-sigs/release-actions). Updates `actions/checkout` from 4.1.7 to 4.2.2 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/692973e3d937129bcbf40652eb9f2f61becf3332...11bd71901bbe5b1630ceea73d27597364c9af683) Updates `actions/setup-go` from 5.0.1 to 5.2.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/cdcb36043654635271a94b9a6d1392de5bb323a7...3041bf56c941b39c61721a86cd11f3bb1338122a) Updates `kubernetes-sigs/release-actions` from 0.2.0 to 0.3.0 - [Release notes](https://github.com/kubernetes-sigs/release-actions/releases) - [Changelog](https://github.com/kubernetes-sigs/release-actions/blob/main/RELEASE.md) - [Commits](https://github.com/kubernetes-sigs/release-actions/compare/2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c...a69972745f85aab4ba5d6c681e2a0e7f73eaff2b) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions - dependency-name: kubernetes-sigs/release-actions dependency-type: direct:production update-type: version-update:semver-minor dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yaml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 203543e..b8503c0 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -18,23 +18,23 @@ jobs: run: | echo "TAG=${GITHUB_REF#refs/*/}" >> $GITHUB_ENV - name: Check out code - uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 + uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2 with: fetch-depth: 1 - name: Set up go - uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v3 + uses: actions/setup-go@3041bf56c941b39c61721a86cd11f3bb1338122a # v3 with: go-version-file: go.mod check-latest: true cache: false - name: Install bom - uses: kubernetes-sigs/release-actions/setup-bom@2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c # v0.2.0 + uses: kubernetes-sigs/release-actions/setup-bom@a69972745f85aab4ba5d6c681e2a0e7f73eaff2b # v0.3.0 - name: Generate SBOM shell: bash run: | bom generate -c .bom.yaml --format=json -o /tmp/sigs.k8s.io-release-utils-$TAG.spdx.json . - name: Publish Release - uses: kubernetes-sigs/release-actions/publish-release@2f8b9ec22aedc9ce15039b6c7716aa6c2907df1c # v0.2.0 + uses: kubernetes-sigs/release-actions/publish-release@a69972745f85aab4ba5d6c681e2a0e7f73eaff2b # v0.3.0 env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} with: