Skip to content

fix: bump github actions go.mod per dependabot suggestions - #783

Merged
rchincha merged 1 commit into
project-stacker:mainfrom
raharper:2026-08-03/rharper/fix/gh-workflow-golang-and-mod-bumps
Aug 4, 2026
Merged

fix: bump github actions go.mod per dependabot suggestions#783
rchincha merged 1 commit into
project-stacker:mainfrom
raharper:2026-08-03/rharper/fix/gh-workflow-golang-and-mod-bumps

Conversation

@raharper

@raharper raharper commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

What type of PR is this?

cleanup

Which issue does this PR fix:

Listed above

What does this PR do / Why do we need it:

Fixes dependabot updates. produces clean grype scan

If an issue # is not available please add repro steps and logs showing the issue:

Testing done on this change:

local build and test on arm64 and x86-64 hosts

Automation added to e2e:

none

Will this break upgrades or downgrades?

no

Does this PR introduce any user-facing change?:

no


By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

@codecov

codecov Bot commented Aug 3, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 54.86%. Comparing base (2dc1b06) to head (ebdfd1a).

Additional details and impacted files
@@             Coverage Diff             @@
##             main     #783       +/-   ##
===========================================
+ Coverage   12.42%   54.86%   +42.44%     
===========================================
  Files          55       55               
  Lines        5909     5909               
===========================================
+ Hits          734     3242     +2508     
+ Misses       5055     2094     -2961     
- Partials      120      573      +453     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

- build(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.1 dependencies go. Fixes project-stacker#781
- build(deps): Bump golang.org/x/term from 0.43.0 to 0.45.0 dependencies go. Fixes project-stacker#779
- build(deps): Bump golang.org/x/sys from 0.45.0 to 0.47.0 dependencies go. Fixes project-stacker#778
- build(deps): Bump github.com/moby/buildkit from 0.28.1 to 0.31.1 dependencies go. Fixes project-stacker#777
- build(deps): Bump machinerun.io/atomfs from 1.2.0 to 1.2.1 dependencies go. Fixes project-stacker#775

- build(deps): Bump codecov/codecov-action from 5 to 7 dependencies github_actions. Fixes project-stacker#774
- build(deps): Bump github.com/cheggaaa/pb/v3 from 3.1.2 to 3.1.7 dependencies go. Fixes project-stacker#773
- build(deps): Bump oras-project/setup-oras from 1 to 2 dependencies github_actions. Fixes project-stacker#772
- build(deps): Bump github/codeql-action from 3 to 4 dependencies github_actions. Fixes project-stacker#771
- build(deps): Bump benjlevesque/short-sha from 3.0 to 4.0 dependencies github_actions.  Fixes project-stacker#770
- build(deps): Bump docker/login-action from 3 to 4 dependencies github_actions. Fixes project-stacker#768

Signed-off-by: Ryan Harper <ryaharpe@cisco.com>
Signed-off-by: Ryan Harper <rharper@woxford.com>
@raharper
raharper force-pushed the 2026-08-03/rharper/fix/gh-workflow-golang-and-mod-bumps branch from 343ce14 to ebdfd1a Compare August 3, 2026 19:04
@rchincha
rchincha merged commit 4583f3d into project-stacker:main Aug 4, 2026
11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants