From 559cdffd41f4dc2ef91ba2e1bbfe8cfe7c6fa630 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 1 Jul 2026 02:08:02 +0000 Subject: [PATCH 1/2] chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: 6.5.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- .github/workflows/act-image-repin.yml | 2 +- .github/workflows/action-pins.yml | 2 +- .github/workflows/build-cli.yaml | 4 ++-- .github/workflows/e2e.yaml | 2 +- .github/workflows/fleet-reconcile.yaml | 2 +- .github/workflows/nightly-release.yaml | 2 +- .github/workflows/pr.yaml | 6 +++--- .github/workflows/release.yaml | 4 ++-- .github/workflows/validate.yaml | 4 ++-- 9 files changed, 14 insertions(+), 14 deletions(-) diff --git a/.github/workflows/act-image-repin.yml b/.github/workflows/act-image-repin.yml index 6862442..5bb03db 100644 --- a/.github/workflows/act-image-repin.yml +++ b/.github/workflows/act-image-repin.yml @@ -101,7 +101,7 @@ jobs: - name: Set up Go if: steps.resolve.outputs.changed == 'true' - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: "1.25" diff --git a/.github/workflows/action-pins.yml b/.github/workflows/action-pins.yml index f7d8a72..08e21d3 100644 --- a/.github/workflows/action-pins.yml +++ b/.github/workflows/action-pins.yml @@ -58,7 +58,7 @@ jobs: with: app-id: '0' private-key: '' - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 - uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0 - uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0 - uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0 diff --git a/.github/workflows/build-cli.yaml b/.github/workflows/build-cli.yaml index 2653a59..8b61cee 100644 --- a/.github/workflows/build-cli.yaml +++ b/.github/workflows/build-cli.yaml @@ -25,7 +25,7 @@ jobs: steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: '1.25' cache: true @@ -54,7 +54,7 @@ jobs: steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: # This job runs the e2e module; install the Go it declares so `go test` # doesn't hard-fail under GOTOOLCHAIN=local. The root build job above diff --git a/.github/workflows/e2e.yaml b/.github/workflows/e2e.yaml index 28a3f3a..d05cdd7 100644 --- a/.github/workflows/e2e.yaml +++ b/.github/workflows/e2e.yaml @@ -153,7 +153,7 @@ jobs: # that triggered the run so we test what GitHub resolved. ref: ${{ github.event.inputs.ref || github.sha }} - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: # The e2e module declares its own toolchain (go 1.24). Drive the # installed Go straight from e2e/go.mod so the runner always matches diff --git a/.github/workflows/fleet-reconcile.yaml b/.github/workflows/fleet-reconcile.yaml index 90cb604..2574165 100644 --- a/.github/workflows/fleet-reconcile.yaml +++ b/.github/workflows/fleet-reconcile.yaml @@ -116,7 +116,7 @@ jobs: ref: ${{ inputs.cascade-ref || github.workflow_sha }} - name: Set up Go - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version-file: go.mod cache: true diff --git a/.github/workflows/nightly-release.yaml b/.github/workflows/nightly-release.yaml index 9d74936..c78b8cf 100644 --- a/.github/workflows/nightly-release.yaml +++ b/.github/workflows/nightly-release.yaml @@ -202,7 +202,7 @@ jobs: # Check out with the PAT so the tag push below triggers Release. token: ${{ secrets.CASCADE_STATE_TOKEN }} - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 if: github.event.inputs.dry_run == 'true' with: go-version: "1.25" diff --git a/.github/workflows/pr.yaml b/.github/workflows/pr.yaml index 02c80c6..1884f59 100644 --- a/.github/workflows/pr.yaml +++ b/.github/workflows/pr.yaml @@ -51,7 +51,7 @@ jobs: steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: '1.25' cache: true @@ -87,7 +87,7 @@ jobs: steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: '1.25' cache: true @@ -109,7 +109,7 @@ jobs: steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: '1.25' cache: true diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index d4e8266..e14e51d 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -42,7 +42,7 @@ jobs: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - name: Set up Go - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: "1.25" @@ -68,7 +68,7 @@ jobs: fetch-depth: 0 - name: Set up Go - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: "1.25" diff --git a/.github/workflows/validate.yaml b/.github/workflows/validate.yaml index ffdb727..4abaad1 100644 --- a/.github/workflows/validate.yaml +++ b/.github/workflows/validate.yaml @@ -39,7 +39,7 @@ jobs: steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: '1.25' cache: true @@ -71,7 +71,7 @@ jobs: steps: - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 - - uses: actions/setup-go@4a3601121dd01d1626a1e23e37211e3254c1c06c # v6.4.0 + - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0 with: go-version: '1.25' cache: true From f9adbfecbef381bd953b39698e435a485435bc3d Mon Sep 17 00:00:00 2001 From: Joshua Temple Date: Sat, 4 Jul 2026 14:18:37 -0400 Subject: [PATCH 2/2] build(deps): sync action_pins manifest for setup-go v6.5.0 Signed-off-by: Joshua Temple --- internal/generate/action_pins.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/generate/action_pins.yaml b/internal/generate/action_pins.yaml index 396ee00..1821132 100644 --- a/internal/generate/action_pins.yaml +++ b/internal/generate/action_pins.yaml @@ -15,7 +15,7 @@ actions: actions/download-artifact: { tag: v8, sha: 3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c, version: v8.0.1, emit: true } actions/upload-artifact: { tag: v7, sha: 043fb46d1a93c77aae656e7c1c64a875d1fc6a0a, version: v7.0.1, emit: true } actions/create-github-app-token: { tag: v3, sha: bcd2ba49218906704ab6c1aa796996da409d3eb1, version: v3.2.0, emit: true } - actions/setup-go: { tag: v6, sha: 4a3601121dd01d1626a1e23e37211e3254c1c06c, version: v6.4.0, emit: false } + actions/setup-go: { tag: v6, sha: 924ae3a1cded613372ab5595356fb5720e22ba16, version: v6.5.0, emit: false } actions/setup-node: { tag: v6, sha: 48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e, version: v6.4.0, emit: false } actions/upload-pages-artifact: { tag: v5, sha: fc324d3547104276b827a68afc52ff2a11cc49c9, version: v5.0.0, emit: false } actions/deploy-pages: { tag: v5, sha: cd2ce8fcbc39b97be8ca5fce6e763baed58fa128, version: v5.0.0, emit: false }