From 78a17e6a20d4f41ac2b99d9885ec34cd185e74c9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 01:20:55 +0000 Subject: [PATCH 1/7] build(deps): bump alpine from 3.21 to 3.24 Bumps alpine from 3.21 to 3.24. --- updated-dependencies: - dependency-name: alpine dependency-version: '3.24' dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index f1acc24..fc8751a 100644 --- a/Dockerfile +++ b/Dockerfile @@ -7,7 +7,7 @@ COPY go.mod ./ COPY . ./ RUN CGO_ENABLED=0 GOOS=linux GOARCH=${TARGETARCH} go build -trimpath -ldflags='-s -w' -o /out/simplewebshell-remoteupdate . -FROM alpine:3.21 +FROM alpine:3.24 RUN apk add --no-cache ca-certificates tar gzip unzip coreutils && \ adduser -D -H -u 1000 app && mkdir -p /app && chown -R app:app /app COPY --from=build /out/simplewebshell-remoteupdate /usr/local/bin/simplewebshell-remoteupdate From b21026912a2a10310d7e8a37dcd06b07398b4329 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 7 Sep 2026 01:20:59 +0000 Subject: [PATCH 2/7] build(deps): bump golang from 1.25-alpine to 1.27-alpine Bumps golang from 1.25-alpine to 1.27-alpine. --- updated-dependencies: - dependency-name: golang dependency-version: 1.27-alpine dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- Dockerfile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Dockerfile b/Dockerfile index f1acc24..9a7ab14 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -FROM golang:1.25-alpine AS build +FROM golang:1.27-alpine AS build # 通过 goproxy.cn 拉取依赖, 避免在无外网代理环境(如国内网络/受限内网)构建超时 ENV GOPROXY=https://goproxy.cn,direct ARG TARGETARCH=amd64 From 67dd25af3ca755f6b0c408e6a3cd4faa50c5da62 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 22 Sep 2026 08:45:02 +0000 Subject: [PATCH 3/7] build(deps): bump actions/upload-artifact from 4 to 7 Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7. - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/upload-artifact dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-image.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index e2ec7c7..23c912f 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -29,7 +29,7 @@ jobs: - name: '导出并上传镜像工件' run: | docker save simplewebshell-remoteupdate | gzip > simplewebshell-remoteupdate-image.tar.gz - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: 'simplewebshell-remoteupdate-docker-image-${{ github.ref_name }}' path: 'simplewebshell-remoteupdate-image.tar.gz' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fc90c04..6c42035 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -42,7 +42,7 @@ jobs: else tar czf ../simplewebshell-remoteupdate-${{ matrix.target }}.tar.gz simplewebshell-remoteupdate fi - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v7 with: name: 'simplewebshell-remoteupdate-${{ matrix.target }}' path: '${{ github.workspace }}/simplewebshell-remoteupdate-${{ matrix.target }}.*' From 3172676490cf3ddbe2acf1ad192f302c98e93b84 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 22 Sep 2026 08:47:33 +0000 Subject: [PATCH 4/7] build(deps): bump actions/setup-go from 5 to 7 Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 7. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v5...v7) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-image.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index e2ec7c7..c0fc7b0 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -18,7 +18,7 @@ jobs: steps: - uses: actions/checkout@v4 - name: 'Go 鍗曞厓娴嬭瘯' - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: go-version: '1.25' - name: '杩愯娴嬭瘯' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fc90c04..ae67d0c 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -26,7 +26,7 @@ jobs: - { target: windows-arm64, goos: windows, goarch: arm64, ext: .exe } steps: - uses: actions/checkout@v4 - - uses: actions/setup-go@v5 + - uses: actions/setup-go@v7 with: go-version: '1.25' - name: '编译 ${{ matrix.target }}' From 353c5926b2fffdcacc39612f6740dfca6c6a17aa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 22 Sep 2026 08:48:21 +0000 Subject: [PATCH 5/7] build(deps): bump actions/checkout from 4 to 7 Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-image.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index e2ec7c7..02ba984 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -16,7 +16,7 @@ jobs: docker-build: runs-on: ubuntu-latest steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - name: 'Go 鍗曞厓娴嬭瘯' uses: actions/setup-go@v5 with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fc90c04..e7d9d55 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -25,7 +25,7 @@ jobs: - { target: windows-amd64, goos: windows, goarch: amd64, ext: .exe } - { target: windows-arm64, goos: windows, goarch: arm64, ext: .exe } steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v7 - uses: actions/setup-go@v5 with: go-version: '1.25' From 9a730d251edb2b4d38943fdc4518f46f351b6d45 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Sep 2026 05:19:22 +0000 Subject: [PATCH 6/7] build(deps): bump actions/download-artifact from 4 to 8 Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8. - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/v4...v8) --- updated-dependencies: - dependency-name: actions/download-artifact dependency-version: '8' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/release.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fc90c04..26e809e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -54,7 +54,7 @@ jobs: needs: build runs-on: ubuntu-latest steps: - - uses: actions/download-artifact@v4 + - uses: actions/download-artifact@v8 with: path: artifacts merge-multiple: true From 69544acc76f2f0cabceb0d02f7fe7d472ac0554c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 28 Sep 2026 05:19:26 +0000 Subject: [PATCH 7/7] build(deps): bump softprops/action-gh-release from 2 to 3 Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](https://github.com/softprops/action-gh-release/compare/v2...v3) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/docker-image.yml | 2 +- .github/workflows/release.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/docker-image.yml b/.github/workflows/docker-image.yml index e2ec7c7..f2280ec 100644 --- a/.github/workflows/docker-image.yml +++ b/.github/workflows/docker-image.yml @@ -37,7 +37,7 @@ jobs: retention-days: 14 - name: '上传镜像包到 Release' if: github.event_name == 'release' || startsWith(github.ref, 'refs/tags/v') - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: tag_name: ${{ github.event.release.tag_name || github.ref_name }} files: 'simplewebshell-remoteupdate-image.tar.gz' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index fc90c04..77c3fb2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -72,7 +72,7 @@ jobs: | sort -z | xargs -0 -r sha1sum > checksums-sha1.txt - name: '上传到 Release' if: github.event_name != 'workflow_dispatch' || github.event.inputs.tag != '' - uses: softprops/action-gh-release@v2 + uses: softprops/action-gh-release@v3 with: tag_name: ${{ github.event.inputs.tag || github.event.release.tag_name || github.ref_name }} files: 'release/*'