From 6e11f900d8b6bba6297f0d307aa5fde0d0d57b1a Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Sep 2026 22:49:45 +0000 Subject: [PATCH 1/6] build(deps): bump actions/setup-go from 5 to 7 Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 7. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v5...v7) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-image.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 5e47f84..cd8ff96 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -13,7 +13,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: 'Go 鍗曞厓娴嬭瘯' - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: go-version: '1.25' - name: '杩愯娴嬭瘯' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f62d256..46c536c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -22,7 +22,7 @@ jobs: - { target: openharmony-armv7, goos: linux, goarch: arm, ext: '' } steps: - uses: actions/checkout@v4 - - uses: actions/setup-go@v5 + - uses: actions/setup-go@v7 with: go-version: '1.25' - name: '编译 ${{ matrix.target }}' From b5410aa0e72ccf7ff05906a32225600bc33e2cd3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Sep 2026 22:49:48 +0000 Subject: [PATCH 2/6] build(deps): bump actions/checkout from 4 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-image.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 5e47f84..07d1a56 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -11,7 +11,7 @@ jobs: docker-build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: 'Go 鍗曞厓娴嬭瘯' uses: actions/setup-go@v5 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f62d256..e06ca61 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -21,7 +21,7 @@ jobs: - { target: openharmony-arm64, goos: linux, goarch: arm64, ext: '' } - { target: openharmony-armv7, goos: linux, goarch: arm, ext: '' } steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: actions/setup-go@v5 with: go-version: '1.25' From 03103ae37e4a8155160f078191727e5928bcf058 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Sep 2026 22:49:52 +0000 Subject: [PATCH 3/6] build(deps): bump actions/upload-artifact from 4 to 7 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-image.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index 5e47f84..781da52 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -24,7 +24,7 @@ jobs: - name: '导出并上传镜像工件' run: | docker save dontcrack-openharmony-linux-kernel | gzip > dontcrack-openharmony-linux-kernel-image.tar.gz - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: 'dontcrack-openharmony-linux-kernel-docker-image-${{ github.ref_name }}' path: 'dontcrack-openharmony-linux-kernel-image.tar.gz' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f62d256..d7a9d9f 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -38,7 +38,7 @@ jobs: else tar czf ../dontcrack-openharmony-linux-kernel-${{ matrix.target }}.tar.gz dontcrack-openharmony-linux-kernel fi - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: 'dontcrack-openharmony-linux-kernel-${{ matrix.target }}' path: '${{ github.workspace }}/dontcrack-openharmony-linux-kernel-${{ matrix.target }}.*' From 3f80fa1001b75212cc6d382fdfc34e302ec662a7 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 4 Sep 2026 22:49:58 +0000 Subject: [PATCH 4/6] build(deps): bump actions/download-artifact from 4 to 8 Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index f62d256..a0cca73 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -50,7 +50,7 @@ jobs: needs: build runs-on: ubuntu-latest steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: path: artifacts merge-multiple: true From aead92fa04531ad9655cb87a34033b853583192d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 01:19:58 +0000 Subject: [PATCH 5/6] build(deps): bump golang from 1.25-alpine to 1.27-alpine Bumps golang from 1.25-alpine to 1.27-alpine. --- updated-dependencies: - dependency-name: golang dependency-version: 1.27-alpine dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index a170876..2541774 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,6 +1,6 @@ # syntax=docker/dockerfile:1.7 # 多阶段构建：golang 编译 → alpine 精简运行镜像（约 10MB） -FROM golang:1.25-alpine AS build +FROM golang:1.27-alpine AS build # 通过 goproxy.cn 拉取依赖, 避免在无外网代理环境(如国内网络/受限内网)构建超时 ENV GOPROXY=https://goproxy.cn,direct WORKDIR /src From f1d2e6f585294678d09a34b855915ccc3bcd3c57 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 01:20:03 +0000 Subject: [PATCH 6/6] build(deps): bump alpine from 3.20 to 3.24 Bumps alpine from 3.20 to 3.24. --- updated-dependencies: - dependency-name: alpine dependency-version: '3.24' dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index a170876..2357c75 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,7 +7,7 @@ WORKDIR /src COPY . . RUN CGO_ENABLED=0 go build -ldflags="-s -w" -o /out/app . -FROM alpine:3.20 +FROM alpine:3.24 RUN addgroup -S app && adduser -S -G app app COPY --from=build /out/app /usr/local/bin/app USER app