lint

build(deps): bump github.com/creasty/defaults from 1.5.2 to 1.8.0 in /tool/actions-gh-release #9108

Triggered via pull request May 30, 2026 22:19

dependabot[bot]

synchronize #6817

dependabot/go_modules/tool/actions-gh-release/github.com/creasty/defaults-1.8.0

Status Success

Total duration 3m 41s

Artifacts –

lint.yaml

on: pull_request

Matrix: go

Matrix: govulncheck

go-lint-completed

govulncheck-completed

Annotations

126 errors and 31 warnings

govulncheck (./tool/actions-gh-release)

Process completed with exit code 3.

govulncheck (./tool/actions-gh-release)

actions.githubClient.createRelease calls github.RepositoriesService.CreateRelease, which eventually calls http.Client.Do

govulncheck (./tool/actions-gh-release)

actions.githubClient.createRelease calls github.RepositoriesService.CreateRelease, which eventually calls net.Dialer.DialContext

govulncheck (./tool/actions-plan-preview)

actions.makeCommentBody calls fmt.Fprintf, which eventually calls model.Application.ProtoReflect

govulncheck (./tool/actions-plan-preview)

actions.makeCommentBody calls fmt.Fprintf, which eventually calls model.AnalysisResult.String

govulncheck (./tool/actions-plan-preview)

actions.makeCommentBody calls fmt.Fprintf, which eventually calls model.AnalysisResult.ProtoReflect

govulncheck (./tool/actions-plan-preview)

actions.makeCommentBody calls fmt.Fprintf, which eventually calls model.APIKey_Role.String

govulncheck (./tool/actions-plan-preview)

actions.init calls oauth2.init, which eventually calls model.APIKey_Role.Descriptor

govulncheck (./tool/actions-plan-preview)

actions.makeCommentBody calls fmt.Fprintf, which eventually calls model.APIKey.String

govulncheck (./tool/actions-plan-preview)

actions.makeCommentBody calls fmt.Fprintf, which eventually calls model.APIKey.ProtoReflect

govulncheck (./tool/actions-plan-preview)

actions.getPullRequest calls github.PullRequestsService.Get, which eventually calls http.Client.Do

govulncheck (./tool/actions-plan-preview)

actions.init calls model.init, which eventually calls jose.init

govulncheck (./tool/actions-plan-preview)

actions.getPullRequest calls github.PullRequestsService.Get, which eventually calls net.Dialer.DialContext

govulncheck (./tool/codegen/protoc-gen-auth)

Process completed with exit code 3.

govulncheck (./tool/codegen/protoc-gen-auth)

protoc.main calls template.Template.Execute

govulncheck (./tool/codegen/protoc-gen-auth)

protoc.main calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls http.Client.PostForm

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.init calls zap.init, which eventually calls http.Client.Do

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.init calls zap.init, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls net.Listen

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.init calls zap.init, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.init calls zap.init, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

waitapproval.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/cloudrun)

livestate.init calls piped.init, which eventually calls http.Client.Do

govulncheck (./pkg/app/pipedv1/plugin/cloudrun)

livestate.init calls piped.init, which eventually calls jose.init

govulncheck (./pkg/app/pipedv1/plugin/cloudrun)

livestate.init calls piped.init, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/cloudrun)

cloudrunservice.main calls piped.Plugin[github.com/pipe-cd/piped-plugin-sdk-go.ConfigNone, github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/cloudrunservice/config.CloudRunDeployTargetConfig, github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/cloudrunservice/config.CloudRunApplicationSpec].Run[github.com/pipe-cd/piped-plugin-sdk-go.ConfigNone github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/cloudrunservice/config.CloudRunDeployTargetConfig github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/cloudrunservice/config.CloudRunApplicationSpec], which eventually calls net.Listen

govulncheck (./pkg/app/pipedv1/plugin/cloudrun)

livestate.init calls piped.init, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/app/pipedv1/plugin/cloudrun)

livestate.init calls piped.init, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/cloudrun)

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

toolregistry.Registry.Helm calls toolregistry.ToolRegistry.InstallTool, which eventually calls http.Client.PostForm

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

provider.Kubectl.CreateNamespace calls exec.CommandContext, which eventually calls http.Client.Do

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

provider.Kubectl.CreateNamespace calls exec.CommandContext, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

deployment.Plugin.executeK8sMultiCanaryCleanStage calls errgroup.Group.Go, which eventually calls net.Listen

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

provider.Kubectl.CreateNamespace calls exec.CommandContext, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

provider.Kubectl.CreateNamespace calls exec.CommandContext, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

deployment.Plugin.executeK8sMultiCanaryCleanStage calls errgroup.Group.Go, which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

deployment.Plugin.executeK8sMultiCanaryCleanStage calls errgroup.Group.Go, which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

deployment.Plugin.executeK8sMultiCanaryCleanStage calls errgroup.Group.Go, which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

deployment.Plugin.executeK8sMultiCanaryCleanStage calls errgroup.Group.Go, which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls http.Client.PostForm

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.init calls piped.init, which eventually calls http.Client.Do

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.init calls piped.init, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls net.Listen

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.init calls piped.init, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.init calls piped.init, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

scriptrun.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls http.Client.PostForm

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.init calls zap.init, which eventually calls http.Client.Do

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.init calls zap.init, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls net.Listen

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.init calls zap.init, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.init calls zap.init, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/wait)

wait.main calls piped.Plugin[struct{}, struct{}, struct{}].Run[struct{} struct{} struct{}], which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/kubernetes)

provider.init calls piped.init, which eventually calls jose.init

govulncheck (./pkg/app/pipedv1/plugin/kubernetes)

livestate.Plugin.Initialize calls sync.Once.Do, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/kubernetes)

kubernetes.main calls piped.Plugin[github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/kubernetes/config.KubernetesPluginConfig, github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/kubernetes/config.KubernetesDeployTargetConfig, github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/kubernetes/config.KubernetesApplicationSpec].Run[github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/kubernetes/config.KubernetesPluginConfig github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/kubernetes/config.KubernetesDeployTargetConfig github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/kubernetes/config.KubernetesApplicationSpec], which eventually calls net.Listen

govulncheck (./pkg/app/pipedv1/plugin/kubernetes)

livestate.Plugin.Initialize calls sync.Once.Do, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/app/pipedv1/plugin/kubernetes)

livestate.Plugin.Initialize calls sync.Once.Do, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/kubernetes)

livestate.Plugin.Initialize calls sync.Once.Do, which eventually calls idna.ToASCII

govulncheck (./pkg/plugin/sdk)

piped.init calls common.init

govulncheck (./pkg/plugin/sdk)

logpersister.stageLogPersister.Errorf calls fmt.Sprintf, which eventually calls common.DeploymentSource.String

govulncheck (./pkg/plugin/sdk)

piped.init calls rpc.init, which eventually calls common.DeploymentSource.ProtoReflect

govulncheck (./pkg/plugin/sdk)

piped.init calls cli.init

govulncheck (./pkg/plugin/sdk)

piped.init calls admin.init

govulncheck (./pkg/plugin/sdk)

diff.Renderer.Render calls fmt.Fprintf, which eventually calls http.Client.PostForm

govulncheck (./pkg/plugin/sdk)

toolregistrytest.fakeClient.InstallTool calls exec.CommandContext, which eventually calls http.Client.Do

govulncheck (./pkg/plugin/sdk)

toolregistrytest.fakeClient.InstallTool calls exec.CommandContext, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/plugin/sdk)

toolregistrytest.fakeClient.InstallTool calls exec.CommandContext, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/plugin/sdk)

toolregistrytest.fakeClient.InstallTool calls exec.CommandContext, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/ecs)

provider.client.PruneServiceTasks calls ecs.Client.UpdateService, which eventually calls http.Client.Do

govulncheck (./pkg/app/pipedv1/plugin/ecs)

livestate.ECSLivestatePlugin.Initialize calls sync.Once.Do, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/ecs)

provider.newClient calls config.LoadDefaultConfig, which eventually calls net.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/ecs)

ecs.main calls piped.Plugin[github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/ecs/config.ECSPluginConfig, github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/ecs/config.ECSDeployTargetConfig, github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/ecs/config.ECSApplicationSpec].Run[github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/ecs/config.ECSPluginConfig github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/ecs/config.ECSDeployTargetConfig github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/ecs/config.ECSApplicationSpec], which eventually calls net.Listen

govulncheck (./pkg/app/pipedv1/plugin/ecs)

livestate.ECSLivestatePlugin.Initialize calls sync.Once.Do, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/app/pipedv1/plugin/ecs)

provider.client.PruneServiceTasks calls ecs.Client.UpdateService, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/ecs)

govulncheck (./pkg/app/pipedv1/plugin/terraform)

toolregistry.Registry.Terraform calls toolregistry.ToolRegistry.InstallTool, which eventually calls http.Client.PostForm

govulncheck (./pkg/app/pipedv1/plugin/terraform)

provider.Terraform.Apply calls exec.CommandContext, which eventually calls http.Client.Do

govulncheck (./pkg/app/pipedv1/plugin/terraform)

provider.Terraform.Apply calls exec.CommandContext, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/terraform)

terraform.main calls piped.Plugin[github.com/pipe-cd/piped-plugin-sdk-go.ConfigNone, github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/terraform/config.DeployTargetConfig, github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/terraform/config.ApplicationConfigSpec].Run[github.com/pipe-cd/piped-plugin-sdk-go.ConfigNone github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/terraform/config.DeployTargetConfig github.com/pipe-cd/pipecd/pkg/app/pipedv1/plugin/terraform/config.ApplicationConfigSpec], which eventually calls net.Listen

govulncheck (./pkg/app/pipedv1/plugin/terraform)

provider.Terraform.Apply calls exec.CommandContext, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/app/pipedv1/plugin/terraform)

provider.Terraform.Apply calls exec.CommandContext, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/terraform)

govulncheck (./pkg/app/pipedv1/plugin/analysis)

http.Provider.Run calls http.Client.Do, which eventually calls http2.Transport.RoundTrip

govulncheck (./pkg/app/pipedv1/plugin/analysis)

http.Provider.Run calls http.http2requestBody.Close, which eventually calls net.Resolver.LookupHost

govulncheck (./pkg/app/pipedv1/plugin/analysis)

executestage.executor.execute calls errgroup.Group.Go, which eventually calls net.Listen

govulncheck (./pkg/app/pipedv1/plugin/analysis)

http.Provider.Run calls http.Client.Do, which eventually calls net.Dialer.DialContext

govulncheck (./pkg/app/pipedv1/plugin/analysis)

http.Provider.Run calls http.Client.Do, which eventually calls net.Dialer.Dial

govulncheck (./pkg/app/pipedv1/plugin/analysis)

executestage.executor.execute calls errgroup.Group.Go, which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/analysis)

executestage.executor.execute calls errgroup.Group.Go, which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/analysis)

executestage.executor.execute calls errgroup.Group.Go, which eventually calls template.Template.ExecuteTemplate

govulncheck (./pkg/app/pipedv1/plugin/analysis)

executestage.executor.execute calls errgroup.Group.Go, which eventually calls template.Template.Execute

govulncheck (./pkg/app/pipedv1/plugin/analysis)

http.Provider.Run calls http.Client.Do, which eventually calls idna.ToASCII

govulncheck (.)

kubernetes.applier.Delete calls sync.Once.Do, which eventually calls net.Resolver.LookupHost

govulncheck (.)

s3.NewStore calls config.LoadDefaultConfig, which eventually calls net.LookupHost

govulncheck (.)

docs.main calls http.Server.ListenAndServe, which calls net.Listen

govulncheck (.)

mysql.NewMySQL calls sql.Open, which eventually calls net.Dialer.DialContext

govulncheck (.)

redis.createPool calls redis.Dial, which calls net.Dialer.Dial

govulncheck (.)

docs.main calls http.Server.ListenAndServe, which eventually calls template.Template.ExecuteTemplate

govulncheck (.)

admin.Admin.handleTop calls template.Template.Execute

govulncheck (.)

docs.main calls http.Server.ListenAndServe, which eventually calls template.Template.ExecuteTemplate

govulncheck (.)

admin.Admin.handleTop calls template.Template.Execute

govulncheck (.)

lifecycle.DownloadBinary calls http.Client.Do, which eventually calls idna.ToASCII

helm

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, azure/setup-helm@v4. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

list-go-modules

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./tool/actions-gh-release)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./tool/actions-plan-preview)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./tool/codegen/protoc-gen-auth)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/app/pipedv1/plugin/waitapproval)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/app/pipedv1/plugin/cloudrun)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/app/pipedv1/plugin/scriptrun)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/app/pipedv1/plugin/wait)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/app/pipedv1/plugin/kubernetes)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./tool/codegen/protoc-gen-auth)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/plugin/sdk)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/app/pipedv1/plugin/ecs)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/app/pipedv1/plugin/terraform)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (./pkg/app/pipedv1/plugin/analysis)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./tool/actions-plan-preview)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/app/pipedv1/plugin/wait)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/app/pipedv1/plugin/scriptrun)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./tool/actions-gh-release)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/app/pipedv1/plugin/cloudrun)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

govulncheck (.)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-go@v5. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

web

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/cache@v4, actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, actions/setup-node@v3. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/app/pipedv1/plugin/waitapproval)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/app/pipedv1/plugin/ecs)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/app/pipedv1/plugin/analysis)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/app/pipedv1/plugin/terraform)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/plugin/sdk)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/app/pipedv1/plugin/kubernetes_multicluster)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (./pkg/app/pipedv1/plugin/kubernetes)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

go (.)

Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683, reviewdog/action-golangci-lint@f9bba13753278f6a73b27a56a3ffb1bfda90ed71. Actions will be forced to run with Node.js 24 by default starting June 16th, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/

Navigation Menu

Uh oh!

build(deps): bump github.com/creasty/defaults from 1.5.2 to 1.8.0 in /tool/actions-gh-release #9108

Summary