From fe5a25580d1f7a609aa526ef8e2e9d68838d9ee5 Mon Sep 17 00:00:00 2001 From: fujiwara Date: Fri, 4 Sep 2026 23:36:58 +0900 Subject: [PATCH] Bump GitHub Actions - Songmu/tagpr 1.18.3 -> 1.19.0 - docker/login-action 4.1.0 -> 4.2.0 - docker/setup-buildx-action 4.0.0 -> 4.1.0 - docker/setup-qemu-action 4.0.0 -> 4.1.0 - goreleaser/goreleaser-action 7.2.1 -> 7.2.2 Consolidates dependabot PRs #1035, #1036, #1037, #1038, #1039. Co-Authored-By: Claude Fable 5.1 Signed-off-by: fujiwara --- .github/workflows/nightly.yml | 8 ++++---- .github/workflows/tagpr-release.yml | 10 +++++----- 2 files changed, 9 insertions(+), 9 deletions(-) diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index 15972fcb..b5ddd18d 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -47,7 +47,7 @@ jobs: fi - name: Run GoReleaser - uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7 + uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2 with: version: latest args: release @@ -56,13 +56,13 @@ jobs: if: ${{ env.DO_RELEASE }} - name: Set up QEMU - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0 + uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 - name: Docker Login - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }} diff --git a/.github/workflows/tagpr-release.yml b/.github/workflows/tagpr-release.yml index 59b36a75..d1b38b6e 100644 --- a/.github/workflows/tagpr-release.yml +++ b/.github/workflows/tagpr-release.yml @@ -27,7 +27,7 @@ jobs: run: | git checkout v2 git symbolic-ref --short HEAD - - uses: Songmu/tagpr@9bbb945b2fb025126186661e27d55485e3fc6df6 # v1.18.3 + - uses: Songmu/tagpr@555e72cee68c09d43dc2337dc9ba890955b630da # v1.19.0 id: tagpr env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} @@ -39,7 +39,7 @@ jobs: go-version: "1.26" if: ${{ steps.tagpr.outputs.tag != '' || github.event_name == 'workflow_dispatch' }} - name: Run GoReleaser - uses: goreleaser/goreleaser-action@1a80836c5c9d9e5755a25cb59ec6f45a3b5f41a8 # v7 + uses: goreleaser/goreleaser-action@5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89 # v7.2.2 with: version: "~> v2" args: release @@ -48,15 +48,15 @@ jobs: if: ${{ steps.tagpr.outputs.tag != '' || github.event_name == 'workflow_dispatch' }} - name: Set up QEMU - uses: docker/setup-qemu-action@ce360397dd3f832beb865e1373c09c0e9f86d70a # v4.0.0 + uses: docker/setup-qemu-action@06116385d9baf250c9f4dcb4858b16962ea869c3 # v4.1.0 if: ${{ steps.tagpr.outputs.tag != '' || github.event_name == 'workflow_dispatch' }} - name: Set up Docker Buildx - uses: docker/setup-buildx-action@4d04d5d9486b7bd6fa91e7baf45bbb4f8b9deedd # v4.0.0 + uses: docker/setup-buildx-action@d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5 # v4.1.0 if: ${{ steps.tagpr.outputs.tag != '' || github.event_name == 'workflow_dispatch' }} - name: Docker Login - uses: docker/login-action@4907a6ddec9925e35a0a9e82d7399ccc52663121 # v4.1.0 + uses: docker/login-action@650006c6eb7dba73a995cc03b0b2d7f5ca915bee # v4.2.0 with: username: ${{ github.actor }} password: ${{ secrets.GITHUB_TOKEN }}