Skip to content

chore(deps): bump the github-actions group across 1 directory with 2 updates - #147

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-3dad419f31
Open

chore(deps): bump the github-actions group across 1 directory with 2 updates#147
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/github_actions/github-actions-3dad419f31

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the github-actions group with 2 updates in the / directory: actions/setup-go and redhat-actions/podman-login.

Updates actions/setup-go from 6 to 7

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0

v6.5.0

What's Changed

Dependency update

New Contributors

Full Changelog: actions/setup-go@v6...v6.5.0

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

What's Changed

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

What's Changed

... (truncated)

Commits

Updates redhat-actions/podman-login from 1 to 2

Release notes

Sourced from redhat-actions/podman-login's releases.

v2.0

Breaking Changes

  • Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x
  • Auth file path is now detected from podman's --verbose output instead of being hardcoded. The fallback path is used only if detection fails.
  • Registry input is now automatically lowercased to comply with OCI spec

Bug Fixes

  • Fix registryLogout() not cleaning up Docker config credentials in the post step (#36)
  • Fix auth file path mismatch with podman 5.x which changed from /tmp/podman-run-<uid> to /tmp/storage-run-<uid> (#47)
  • Fix ENOENT error when ~/.docker directory does not exist (#42)

Features

  • Add tls_verify input to skip TLS certificate verification for self-signed registries
  • Support AWS OIDC temporary credentials for ECR login via AWS_SESSION_TOKEN (#37)
  • Automatically lowercase registry input to prevent OCI naming errors (#44)

Dependency Upgrades

  • TypeScript 5.x to 6.0.3
  • ESLint 8 (EOL) to 10 with flat config
  • @aws-sdk/client-ecr 3.535 to 3.1094
  • @vercel/ncc 0.38 to 0.44
  • Remove unused @aws-sdk/util-base64
  • Resolve all npm audit vulnerabilities

CI & Infrastructure

  • Upgrade actions/checkout v6 to v7, actions/setup-node v6 to v7
  • Add workflow-level permissions: contents: read
  • Add concurrency groups to cancel redundant CI runs
  • Pin runs-on to ubuntu-24.04
  • Add Dependabot for npm and GitHub Actions updates
  • Add SECURITY.md
  • Enable secret scanning and push protection
  • Remove deprecated CRDA vulnerability scan workflow

Full Changelog: redhat-actions/podman-login@v1.7...v2.0

Update action to run on Node20.https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/

v1.6

Update action/core dependency to 1.10.0

Update action to run on Node16

v1.5

v1.4

No release notes provided.

v1.3

No release notes provided.

... (truncated)

Changelog

Sourced from redhat-actions/podman-login's changelog.

podman-login Changelog

v2.0

Breaking Changes

  • Upgrade @actions/core 1.x to 3.x, @actions/exec 1.x to 3.x, @actions/io 1.x to 3.x
  • Auth file path is now detected from podman's --verbose output instead of being hardcoded. The fallback path is used only if detection fails.
  • Registry input is now automatically lowercased to comply with OCI spec

Bug Fixes

  • Fix registryLogout() not cleaning up Docker config credentials in the post step (#36)
  • Fix auth file path mismatch with podman 5.x which changed from /tmp/podman-run-<uid> to /tmp/storage-run-<uid> (#47)
  • Fix ENOENT error when ~/.docker directory does not exist (#42)

Features

  • Add tls_verify input to skip TLS certificate verification for self-signed registries
  • Support AWS OIDC temporary credentials for ECR login via AWS_SESSION_TOKEN (#37)
  • Automatically lowercase registry input to prevent OCI naming errors (#44)

Dependency Upgrades

  • TypeScript 5.x to 6.0.3
  • ESLint 8 (EOL) to 10 with flat config
  • @aws-sdk/client-ecr 3.535 to 3.1094
  • @vercel/ncc 0.38 to 0.44
  • Remove unused @aws-sdk/util-base64
  • Resolve all npm audit vulnerabilities

CI & Infrastructure

  • Upgrade actions/checkout v6 to v7, actions/setup-node v6 to v7
  • Add workflow-level permissions: contents: read
  • Add concurrency groups to cancel redundant CI runs
  • Pin runs-on to ubuntu-24.04
  • Add Dependabot for npm and GitHub Actions updates
  • Add SECURITY.md
  • Enable secret scanning and push protection
  • Remove deprecated CRDA vulnerability scan workflow

v1.8

v1.7

v1.6

  • Update action/core dependency to 1.10.0

v1.5

v1.4

... (truncated)

Commits
  • 50c2d9a Update CHANGELOG.md for v2.0 release
  • 8b1d074 Merge pull request #64 from redhat-actions/fix/remaining-issues
  • 6be3c81 Fix auth file path detection, lowercase registry, and ECR OIDC support
  • b1530e7 Merge pull request #63 from redhat-actions/feature/tls-verify
  • b0eba47 Add tls_verify input to skip TLS certificate verification
  • dff696f Remove CRDA vulnerability scan workflow
  • 20eef96 Merge pull request #62 from redhat-actions/update/types-node-and-dependabot-c...
  • b9e7b01 Update @​types/node to 26.1.1 and exclude TypeScript 7 from Dependabot
  • 07532ea Fix ENOENT error when ~/.docker directory does not exist
  • 36756be Merge pull request #59 from redhat-actions/dependabot/github_actions/redhat-a...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…updates

Bumps the github-actions group with 2 updates in the / directory: [actions/setup-go](https://github.com/actions/setup-go) and [redhat-actions/podman-login](https://github.com/redhat-actions/podman-login).


Updates `actions/setup-go` from 6 to 7
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v6...v7)

Updates `redhat-actions/podman-login` from 1 to 2
- [Release notes](https://github.com/redhat-actions/podman-login/releases)
- [Changelog](https://github.com/redhat-actions/podman-login/blob/main/CHANGELOG.md)
- [Commits](redhat-actions/podman-login@v1...v2)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: redhat-actions/podman-login
  dependency-version: '2'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jul 24, 2026
@dosubot dosubot Bot added the size:XS This PR changes 0-9 lines, ignoring generated files. label Jul 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code size:XS This PR changes 0-9 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants