From c07cc37b36f959cbb620aa283aebbd98216a376c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 31 Aug 2026 04:32:13 +0000 Subject: [PATCH] build(deps): bump the cicd group across 1 directory with 6 updates Bumps the cicd group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `6.0.2` | `6.1.0` | | [runs-on/action](https://github.com/runs-on/action) | `2.2.0` | `2.3.0` | | [cloudposse/.github/.github/workflows/shared-release-branches.yml](https://github.com/cloudposse/.github) | `0.167.3` | `0.168.0` | | [github/codeql-action/upload-sarif](https://github.com/github/codeql-action) | `4.37.4` | `4.37.7` | | [cloudposse/.github/.github/workflows/shared-go-auto-release.yml](https://github.com/cloudposse/.github) | `0.167.3` | `0.168.0` | | [cloudposse/github-action-setup-atmos](https://github.com/cloudposse/github-action-setup-atmos) | `3.2.0` | `3.5.0` | Updates `actions/checkout` from 6.0.2 to 6.1.0 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6.0.2...d23441a48e516b6c34aea4fa41551a30e30af803) Updates `runs-on/action` from 2.2.0 to 2.3.0 - [Release notes](https://github.com/runs-on/action/releases) - [Commits](https://github.com/runs-on/action/compare/4e5f72399b6b17f2e79c511c1b38a315a64d22dc...46910bf61b41721b0579f237e186afb35477007a) Updates `cloudposse/.github/.github/workflows/shared-release-branches.yml` from 0.167.3 to 0.168.0 - [Release notes](https://github.com/cloudposse/.github/releases) - [Commits](https://github.com/cloudposse/.github/compare/49ac8cd5c4cf74abdbf24a80027cd3bde811133a...3911c663309ecdda30d8b8fcbec7bde19d1d6ddb) Updates `github/codeql-action/upload-sarif` from 4.37.4 to 4.37.7 - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](https://github.com/github/codeql-action/compare/v4.37.4...ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd) Updates `cloudposse/.github/.github/workflows/shared-go-auto-release.yml` from 0.167.3 to 0.168.0 - [Release notes](https://github.com/cloudposse/.github/releases) - [Commits](https://github.com/cloudposse/.github/compare/49ac8cd5c4cf74abdbf24a80027cd3bde811133a...3911c663309ecdda30d8b8fcbec7bde19d1d6ddb) Updates `cloudposse/github-action-setup-atmos` from 3.2.0 to 3.5.0 - [Release notes](https://github.com/cloudposse/github-action-setup-atmos/releases) - [Commits](https://github.com/cloudposse/github-action-setup-atmos/compare/89c34b209108da66a27c8d6565d8d4b21dbdaa73...60878d48037763f759aedee74e9cc0c2dc88e9ec) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd - dependency-name: runs-on/action dependency-version: 2.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd - dependency-name: cloudposse/.github/.github/workflows/shared-release-branches.yml dependency-version: 0.168.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd - dependency-name: github/codeql-action/upload-sarif dependency-version: 4.37.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: cicd - dependency-name: cloudposse/.github/.github/workflows/shared-go-auto-release.yml dependency-version: 0.168.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd - dependency-name: cloudposse/github-action-setup-atmos dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: cicd ... Signed-off-by: dependabot[bot] --- .github/workflows/atmos-pro.yaml | 2 +- .github/workflows/build.yml | 4 ++-- .github/workflows/codeql.yml | 4 ++-- .github/workflows/feature-release.yml | 2 +- .github/workflows/landing-demos.yaml | 2 +- .github/workflows/nightlybuilds.yml | 2 +- .github/workflows/planfile-artifacts-e2e.yml | 4 ++-- .github/workflows/planfile-verify-e2e.yml | 6 +++--- .github/workflows/scorecard.yml | 2 +- .github/workflows/setup-go-cache-warmup.yml | 2 +- .github/workflows/test.yml | 8 ++++---- .github/workflows/version-tracker.yaml | 2 +- 12 files changed, 20 insertions(+), 20 deletions(-) diff --git a/.github/workflows/atmos-pro.yaml b/.github/workflows/atmos-pro.yaml index dca71cda7e9..f6815be9514 100644 --- a/.github/workflows/atmos-pro.yaml +++ b/.github/workflows/atmos-pro.yaml @@ -27,7 +27,7 @@ jobs: id-token: write timeout-minutes: 15 steps: - - uses: runs-on/action@4e5f72399b6b17f2e79c511c1b38a315a64d22dc # v2.2.0 + - uses: runs-on/action@46910bf61b41721b0579f237e186afb35477007a # v2.3.0 - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: fetch-depth: 0 diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml index a08e92b20c3..f7bfd0ec2ee 100644 --- a/.github/workflows/build.yml +++ b/.github/workflows/build.yml @@ -26,7 +26,7 @@ jobs: id-token: write contents: write pull-requests: write - uses: cloudposse/.github/.github/workflows/shared-release-branches.yml@49ac8cd5c4cf74abdbf24a80027cd3bde811133a # main + uses: cloudposse/.github/.github/workflows/shared-release-branches.yml@3911c663309ecdda30d8b8fcbec7bde19d1d6ddb # main secrets: inherit homebrew: @@ -128,7 +128,7 @@ jobs: - name: "Upload Trivy scan results to code-scanning" if: always() - uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: sarif_file: trivy-results.sarif diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index ee3e578a41f..56a24dfcda5 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -147,7 +147,7 @@ jobs: - name: Upload SARIF file if: always() - uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: sarif_file: govulncheck.sarif category: govulncheck @@ -187,7 +187,7 @@ jobs: - name: Upload SARIF to code-scanning if: always() - uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: sarif_file: semgrep.sarif category: semgrep diff --git a/.github/workflows/feature-release.yml b/.github/workflows/feature-release.yml index bea60647ae6..698f8b43505 100644 --- a/.github/workflows/feature-release.yml +++ b/.github/workflows/feature-release.yml @@ -23,7 +23,7 @@ jobs: # independent of which token is used for git/API calls elsewhere. permissions: id-token: write - uses: cloudposse/.github/.github/workflows/shared-go-auto-release.yml@49ac8cd5c4cf74abdbf24a80027cd3bde811133a # main + uses: cloudposse/.github/.github/workflows/shared-go-auto-release.yml@3911c663309ecdda30d8b8fcbec7bde19d1d6ddb # main with: publish: true prerelease: true diff --git a/.github/workflows/landing-demos.yaml b/.github/workflows/landing-demos.yaml index b4d0fee0e2a..796dcb628cd 100644 --- a/.github/workflows/landing-demos.yaml +++ b/.github/workflows/landing-demos.yaml @@ -48,7 +48,7 @@ jobs: go-version-file: go.mod - name: Set up Atmos - uses: cloudposse/github-action-setup-atmos@89c34b209108da66a27c8d6565d8d4b21dbdaa73 # v3.2.0 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: atmos-version: ${{ env.ATMOS_BOOTSTRAP_VERSION }} install-wrapper: false diff --git a/.github/workflows/nightlybuilds.yml b/.github/workflows/nightlybuilds.yml index 9f653e0188d..718b2ff7747 100644 --- a/.github/workflows/nightlybuilds.yml +++ b/.github/workflows/nightlybuilds.yml @@ -21,7 +21,7 @@ permissions: jobs: release: - uses: cloudposse/.github/.github/workflows/shared-go-auto-release.yml@49ac8cd5c4cf74abdbf24a80027cd3bde811133a # main + uses: cloudposse/.github/.github/workflows/shared-go-auto-release.yml@3911c663309ecdda30d8b8fcbec7bde19d1d6ddb # main with: publish: true format: binary diff --git a/.github/workflows/planfile-artifacts-e2e.yml b/.github/workflows/planfile-artifacts-e2e.yml index e5bf24092d3..0ba63c2eea7 100644 --- a/.github/workflows/planfile-artifacts-e2e.yml +++ b/.github/workflows/planfile-artifacts-e2e.yml @@ -71,7 +71,7 @@ jobs: go-version-file: "go.mod" - name: Set up Atmos - uses: cloudposse/github-action-setup-atmos@89c34b209108da66a27c8d6565d8d4b21dbdaa73 # v3.2.0 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: atmos-version: ${{ env.ATMOS_BOOTSTRAP_VERSION }} install-wrapper: false @@ -113,7 +113,7 @@ jobs: go-version-file: "go.mod" - name: Set up Atmos - uses: cloudposse/github-action-setup-atmos@89c34b209108da66a27c8d6565d8d4b21dbdaa73 # v3.2.0 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: atmos-version: ${{ env.ATMOS_BOOTSTRAP_VERSION }} install-wrapper: false diff --git a/.github/workflows/planfile-verify-e2e.yml b/.github/workflows/planfile-verify-e2e.yml index a4cc151365c..97db263d99d 100644 --- a/.github/workflows/planfile-verify-e2e.yml +++ b/.github/workflows/planfile-verify-e2e.yml @@ -73,7 +73,7 @@ jobs: with: go-version-file: "go.mod" - name: Set up Atmos - uses: cloudposse/github-action-setup-atmos@89c34b209108da66a27c8d6565d8d4b21dbdaa73 # v3.2.0 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: atmos-version: ${{ env.ATMOS_BOOTSTRAP_VERSION }} install-wrapper: false @@ -120,7 +120,7 @@ jobs: with: go-version-file: "go.mod" - name: Set up Atmos - uses: cloudposse/github-action-setup-atmos@89c34b209108da66a27c8d6565d8d4b21dbdaa73 # v3.2.0 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: atmos-version: ${{ env.ATMOS_BOOTSTRAP_VERSION }} install-wrapper: false @@ -159,7 +159,7 @@ jobs: with: go-version-file: "go.mod" - name: Set up Atmos - uses: cloudposse/github-action-setup-atmos@89c34b209108da66a27c8d6565d8d4b21dbdaa73 # v3.2.0 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: atmos-version: ${{ env.ATMOS_BOOTSTRAP_VERSION }} install-wrapper: false diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index ae4f9f5651d..c452300dc02 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -54,6 +54,6 @@ jobs: retention-days: 5 - name: Upload to code-scanning - uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: sarif_file: results.sarif diff --git a/.github/workflows/setup-go-cache-warmup.yml b/.github/workflows/setup-go-cache-warmup.yml index 3ca31668291..3c4b3990649 100644 --- a/.github/workflows/setup-go-cache-warmup.yml +++ b/.github/workflows/setup-go-cache-warmup.yml @@ -60,7 +60,7 @@ jobs: id: go - name: Set up Atmos - uses: cloudposse/github-action-setup-atmos@89c34b209108da66a27c8d6565d8d4b21dbdaa73 # v3.2.0 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: atmos-version: ${{ env.ATMOS_BOOTSTRAP_VERSION }} install-wrapper: false diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 32953e15b7f..5e61a434102 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -95,7 +95,7 @@ jobs: with: egress-policy: audit - - uses: runs-on/action@4e5f72399b6b17f2e79c511c1b38a315a64d22dc # v2.2.0 + - uses: runs-on/action@46910bf61b41721b0579f237e186afb35477007a # v2.3.0 if: matrix.target == 'linux' - name: Announce build target @@ -416,7 +416,7 @@ jobs: - name: Check out code into the Go module directory if: ${{ ! ( matrix.flavor.target == 'windows' && github.event.pull_request.draft ) }} - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 + uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0 with: persist-credentials: false @@ -818,7 +818,7 @@ jobs: - name: Upload Trivy config scan results if: always() - uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4 + uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7 with: sarif_file: trivy-config.sarif category: trivy-config @@ -1538,7 +1538,7 @@ jobs: # endpoint, which is gated purely by this job's own id-token permission. permissions: id-token: write - uses: cloudposse/.github/.github/workflows/shared-go-auto-release.yml@49ac8cd5c4cf74abdbf24a80027cd3bde811133a # main + uses: cloudposse/.github/.github/workflows/shared-go-auto-release.yml@3911c663309ecdda30d8b8fcbec7bde19d1d6ddb # main with: publish: false format: binary diff --git a/.github/workflows/version-tracker.yaml b/.github/workflows/version-tracker.yaml index 5fed518b330..28b900538fc 100644 --- a/.github/workflows/version-tracker.yaml +++ b/.github/workflows/version-tracker.yaml @@ -39,7 +39,7 @@ jobs: go-version-file: go.mod - name: Set up Atmos - uses: cloudposse/github-action-setup-atmos@89c34b209108da66a27c8d6565d8d4b21dbdaa73 # v3.2.0 + uses: cloudposse/github-action-setup-atmos@60878d48037763f759aedee74e9cc0c2dc88e9ec # v3.5.0 with: atmos-version: ${{ env.ATMOS_BOOTSTRAP_VERSION }} install-wrapper: false