From d48636291f37f51c709aebf8621d5c811b2226f8 Mon Sep 17 00:00:00 2001 From: updatecli Date: Tue, 5 May 2026 07:16:09 +0000 Subject: [PATCH 1/9] chore: deps(github): bump Action release for actions/add-to-project f... MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... rom 244f685bbc3b7adfa8466e08b698b5577571133e to 5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd (Pinned from v2.0.0) Made with ❤️️ by updatecli --- .github/workflows/add_issue_to_project.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/add_issue_to_project.yaml b/.github/workflows/add_issue_to_project.yaml index e8f51f8b..5324ed3b 100644 --- a/.github/workflows/add_issue_to_project.yaml +++ b/.github/workflows/add_issue_to_project.yaml @@ -9,7 +9,7 @@ jobs: name: Add issue to Updatecli project runs-on: ubuntu-24.04 steps: - - uses: actions/add-to-project@244f685bbc3b7adfa8466e08b698b5577571133e # v1.0.2 + - uses: actions/add-to-project@5afcf98fcd03f1c2f92c3c83f58ae24323cc57fd # v2.0.0 with: project-url: https://github.com/orgs/updatecli/projects/2 github-token: ${{ secrets.ADD_TO_PROJECT_PAT }} From f0323a8b3a3c011b06bce9a648fc45ae0fb99035 Mon Sep 17 00:00:00 2001 From: updatecli Date: Tue, 5 May 2026 07:17:16 +0000 Subject: [PATCH 2/9] chore: deps(github): bump Action release for goreleaser/goreleaser-ac... MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... tion from ec59f474b9834571250b370d4735c50f8e2d1e29 to 1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 (Pinned from v7.2.1) Made with ❤️️ by updatecli --- .github/workflows/go.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/go.yaml b/.github/workflows/go.yaml index 49cfa269..8bd70e5b 100644 --- a/.github/workflows/go.yaml +++ b/.github/workflows/go.yaml @@ -42,7 +42,7 @@ jobs: # we always use the latest patch version. version: v2.11.3 - name: Install GoReleaser - uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0 + uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1 with: install-only: true - name: Show GoReleaser version From 0a897cf76ffa12f47e0320212bdb7d93e277c58a Mon Sep 17 00:00:00 2001 From: updatecli Date: Tue, 5 May 2026 07:17:52 +0000 Subject: [PATCH 3/9] chore: deps(github): bump Action tag for release-drafter/release-draf... MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... ter from 139054aeaa9adc52ab36ddf67437541f039b88e2 to 563bf132657a13ded0b01fcb723c5a58cdd824e2 (Pinned from v7.2.1) Made with ❤️️ by updatecli --- .github/workflows/release-drafter.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-drafter.yml b/.github/workflows/release-drafter.yml index 3351a394..d589f40f 100644 --- a/.github/workflows/release-drafter.yml +++ b/.github/workflows/release-drafter.yml @@ -10,7 +10,7 @@ jobs: update_release_draft: runs-on: ubuntu-24.04 steps: - - uses: release-drafter/release-drafter@139054aeaa9adc52ab36ddf67437541f039b88e2 # v7.1.1 + - uses: release-drafter/release-drafter@563bf132657a13ded0b01fcb723c5a58cdd824e2 # v7.2.1 with: config-name: release-drafter.yaml env: From f0392a9a8318b53889c0f837ad5a587b589e1379 Mon Sep 17 00:00:00 2001 From: updatecli Date: Tue, 5 May 2026 07:18:31 +0000 Subject: [PATCH 4/9] chore: deps(github): bump Action tag for goreleaser/goreleaser-action... MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... from ec59f474b9834571250b370d4735c50f8e2d1e29 to 1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 (Pinned from v7.2.1) Made with ❤️️ by updatecli --- .github/workflows/release-sandbox.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release-sandbox.yaml b/.github/workflows/release-sandbox.yaml index c71525c6..e886a352 100644 --- a/.github/workflows/release-sandbox.yaml +++ b/.github/workflows/release-sandbox.yaml @@ -36,7 +36,7 @@ jobs: go-version: 1.26.1 id: go - name: Install GoReleaser - uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0 + uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1 with: install-only: true - name: Show GoReleaser version From 5856743aa454d59bedda1e421ced4de2dbef480a Mon Sep 17 00:00:00 2001 From: updatecli Date: Tue, 5 May 2026 07:18:41 +0000 Subject: [PATCH 5/9] chore: deps(github): bump Action tag for goreleaser/goreleaser-action... MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... from ec59f474b9834571250b370d4735c50f8e2d1e29 to 1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 (Pinned from v7.2.1) Made with ❤️️ by updatecli --- .github/workflows/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index a8de1771..cca6f19d 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -36,7 +36,7 @@ jobs: go-version: 1.26.1 id: go - name: Install GoReleaser - uses: goreleaser/goreleaser-action@ec59f474b9834571250b370d4735c50f8e2d1e29 # v7.0.0 + uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7.2.1 with: install-only: true - name: Show GoReleaser version From 2ebd82d3b7679791003c1c1f04f29ffe97680330 Mon Sep 17 00:00:00 2001 From: updatecli Date: Tue, 5 May 2026 07:19:10 +0000 Subject: [PATCH 6/9] chore: deps(github): bump Action release for docker/login-action from... MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... b45d80f862d83dbcd57f89517bcf500b2ab88fb2 to 4907a6ddec9925e35a0a9e82d7399ccc52663121 (Pinned from v4.1.0) Made with ❤️️ by updatecli --- .github/workflows/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index cca6f19d..7fca5df1 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -42,7 +42,7 @@ jobs: - name: Show GoReleaser version run: goreleaser --version - name: Login to DockerHub - uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 + uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} From 7531e4d49a3205b29a84930b627c30c36c6b0635 Mon Sep 17 00:00:00 2001 From: updatecli Date: Tue, 5 May 2026 07:19:12 +0000 Subject: [PATCH 7/9] chore: deps(github): bump Action tag for docker/login-action from b45... MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... d80f862d83dbcd57f89517bcf500b2ab88fb2 to 4907a6ddec9925e35a0a9e82d7399ccc52663121 (Pinned from v4.1.0) Made with ❤️️ by updatecli --- .github/workflows/release.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 7fca5df1..727cdb10 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -47,7 +47,7 @@ jobs: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_PASSWORD }} - name: Login to GitHub Docker Registry - uses: docker/login-action@b45d80f862d83dbcd57f89517bcf500b2ab88fb2 # v4.0.0 + uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 with: registry: ghcr.io username: ${{ github.repository_owner }} From 04d66b370f983677e618dd6e39817221655394ab Mon Sep 17 00:00:00 2001 From: updatecli Date: Tue, 5 May 2026 07:20:18 +0000 Subject: [PATCH 8/9] chore: deps(github): bump Action release for crate-ci/typos from 6312... MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... 08b7aac2daa8b707f55e7331f9112b0e062d to bbaefadf97b0ec5fdc942684b647f1a6ab250274 (Pinned from v1.46.0) Made with ❤️️ by updatecli --- .github/workflows/typos.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/typos.yaml b/.github/workflows/typos.yaml index ae2254a7..393d7b57 100644 --- a/.github/workflows/typos.yaml +++ b/.github/workflows/typos.yaml @@ -11,4 +11,4 @@ jobs: - name: Checkout Actions Repository uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 - name: Check spelling of file.txt - uses: crate-ci/typos@631208b7aac2daa8b707f55e7331f9112b0e062d # v1.44.0 + uses: crate-ci/typos@bbaefadf97b0ec5fdc942684b647f1a6ab250274 # v1.46.0 From 696977566f079e509f74980d43275904f4a571fb Mon Sep 17 00:00:00 2001 From: updatecli Date: Tue, 5 May 2026 07:20:52 +0000 Subject: [PATCH 9/9] chore: deps(github): bump Action release for zizmorcore/zizmor-action... MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ... from 71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 to b1d7e1fb5de872772f31590499237e7cce841e8e (Pinned from v0.5.3) Made with ❤️️ by updatecli --- .github/workflows/zizmor.yaml | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index e5f64886..c6402d7c 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -1,13 +1,10 @@ -name: GitHub Actions Security Analysis with zizmor 🌈 - +name: "GitHub Actions Security Analysis with zizmor \U0001F308" on: push: branches: ["main"] pull_request: branches: ["**"] - permissions: {} - jobs: zizmor: runs-on: ubuntu-latest @@ -18,9 +15,8 @@ jobs: uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2 with: persist-credentials: false - - - name: Run zizmor 🌈 - uses: zizmorcore/zizmor-action@71321a20a9ded102f6e9ce5718a2fcec2c4f70d8 # v0.5.2 + - name: "Run zizmor \U0001F308" + uses: zizmorcore/zizmor-action@b1d7e1fb5de872772f31590499237e7cce841e8e # v0.5.3 with: # intentionally not scanning the entire repository, inputs: ./.github/