From d3ec4fde374774d093c57831e963fa1b1320bccb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 11 Oct 2026 07:16:23 +0000 Subject: [PATCH] chore(deps): Bump the development-dependencies group across 1 directory with 13 updates Bumps the development-dependencies group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [go-openapi/ci-workflows/.github/workflows/auto-merge.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | | [go-openapi/ci-workflows/.github/workflows/bump-release-monorepo.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | | [go-openapi/ci-workflows/.github/workflows/codeql.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | | [go-openapi/ci-workflows/.github/workflows/contributors.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | | [go-openapi/ci-workflows/.github/workflows/changed-paths.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | | [actions/setup-node](https://github.com/actions/setup-node) | `7.0.0` | `7.1.0` | | [go-openapi/ci-workflows/.github/workflows/go-test-monorepo.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | | [go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | | [go-openapi/ci-workflows/.github/workflows/scanner.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | | [go-openapi/ci-workflows/.github/workflows/release.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `7.0.1` | `7.0.2` | | [actions/download-artifact](https://github.com/actions/download-artifact) | `8.0.1` | `8.0.2` | | [go-openapi/ci-workflows/.github/workflows/webhook-announcements.yml](https://github.com/go-openapi/ci-workflows) | `0.6.2` | `0.6.3` | Updates `go-openapi/ci-workflows/.github/workflows/auto-merge.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) Updates `go-openapi/ci-workflows/.github/workflows/bump-release-monorepo.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) Updates `go-openapi/ci-workflows/.github/workflows/codeql.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) Updates `go-openapi/ci-workflows/.github/workflows/contributors.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) Updates `go-openapi/ci-workflows/.github/workflows/changed-paths.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) Updates `actions/setup-node` from 7.0.0 to 7.1.0 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/820762786026740c76f36085b0efc47a31fe5020...949feb2413d6458794dcd2491c4babbbce0c15c1) Updates `go-openapi/ci-workflows/.github/workflows/go-test-monorepo.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) Updates `go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) Updates `go-openapi/ci-workflows/.github/workflows/scanner.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) Updates `go-openapi/ci-workflows/.github/workflows/release.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) Updates `actions/upload-artifact` from 7.0.1 to 7.0.2 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/043fb46d1a93c77aae656e7c1c64a875d1fc6a0a...cf430e030ddbb5b0abf93d22962f4752f3646cd9) Updates `actions/download-artifact` from 8.0.1 to 8.0.2 - [Release notes](https://github.com/actions/download-artifact/releases) - [Commits](https://github.com/actions/download-artifact/compare/3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c...9000827ccba6bdab643e8b6fd33ac0654aef8333) Updates `go-openapi/ci-workflows/.github/workflows/webhook-announcements.yml` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/go-openapi/ci-workflows/releases) - [Commits](https://github.com/go-openapi/ci-workflows/compare/cba06a2e6390abfedda6bf1067f44741cbe93650...69a76bc5d13145693ca13d24a418942b59fce727) --- updated-dependencies: - dependency-name: go-openapi/ci-workflows/.github/workflows/auto-merge.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/ci-workflows/.github/workflows/bump-release-monorepo.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/ci-workflows/.github/workflows/codeql.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/ci-workflows/.github/workflows/contributors.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/ci-workflows/.github/workflows/changed-paths.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: actions/setup-node dependency-version: 7.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: development-dependencies - dependency-name: go-openapi/ci-workflows/.github/workflows/go-test-monorepo.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/ci-workflows/.github/workflows/scanner.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/ci-workflows/.github/workflows/release.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: actions/upload-artifact dependency-version: 7.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: actions/download-artifact dependency-version: 8.0.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies - dependency-name: go-openapi/ci-workflows/.github/workflows/webhook-announcements.yml dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: development-dependencies ... Signed-off-by: dependabot[bot] --- .github/workflows/auto-merge.yml | 2 +- .github/workflows/bump-release.yml | 2 +- .github/workflows/codeql.yml | 2 +- .github/workflows/contributors.yml | 2 +- .github/workflows/front-end-test.yml | 4 ++-- .github/workflows/go-test.yml | 2 +- .github/workflows/monitor-bot-pr.yml | 2 +- .github/workflows/scanner.yml | 2 +- .github/workflows/tag-release.yml | 2 +- .github/workflows/toolchain-independence.yml | 6 +++--- .github/workflows/update-doc.yml | 4 ++-- .github/workflows/webhook-announcements.yml | 2 +- 12 files changed, 16 insertions(+), 16 deletions(-) diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml index 4655a91b..4de04532 100644 --- a/.github/workflows/auto-merge.yml +++ b/.github/workflows/auto-merge.yml @@ -11,5 +11,5 @@ jobs: permissions: contents: write pull-requests: write - uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/auto-merge.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 secrets: inherit diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml index 1ce5dc3d..1a17272e 100644 --- a/.github/workflows/bump-release.yml +++ b/.github/workflows/bump-release.yml @@ -31,7 +31,7 @@ jobs: permissions: contents: write pull-requests: write - uses: go-openapi/ci-workflows/.github/workflows/bump-release-monorepo.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/bump-release-monorepo.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 with: bump-type: ${{ inputs.bump-type }} tag-message-title: ${{ inputs.tag-message-title }} diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 251010bd..56544e66 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -18,5 +18,5 @@ jobs: permissions: contents: read security-events: write - uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/codeql.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 secrets: inherit diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml index 2f6b71d5..3e4dea3a 100644 --- a/.github/workflows/contributors.yml +++ b/.github/workflows/contributors.yml @@ -14,5 +14,5 @@ jobs: permissions: pull-requests: write contents: write - uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/contributors.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 secrets: inherit diff --git a/.github/workflows/front-end-test.yml b/.github/workflows/front-end-test.yml index 49ee762c..d3893139 100644 --- a/.github/workflows/front-end-test.yml +++ b/.github/workflows/front-end-test.yml @@ -40,7 +40,7 @@ jobs: # A called workflow cannot hold more than its caller grants, and an omitted scope # is 'none': without this the run is rejected before it starts. pull-requests: read - uses: go-openapi/ci-workflows/.github/workflows/changed-paths.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/changed-paths.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 with: preset: front-end # The producer of the -format=json envelope the app consumes. A change here can @@ -76,7 +76,7 @@ jobs: sparse-checkout: hack/doc-site/genspec-wasi/ - name: Set up node - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: ${{ matrix.node-version }} cache: npm diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml index 89ca2b48..d775e868 100644 --- a/.github/workflows/go-test.yml +++ b/.github/workflows/go-test.yml @@ -13,7 +13,7 @@ on: jobs: test: - uses: go-openapi/ci-workflows/.github/workflows/go-test-monorepo.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/go-test-monorepo.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 with: # The suites emit the same document under any loader -- TestLoaderAgreement holds that over # the whole corpus -- so which one runs is a question about what the run costs, and this diff --git a/.github/workflows/monitor-bot-pr.yml b/.github/workflows/monitor-bot-pr.yml index e72907b8..e0e8965b 100644 --- a/.github/workflows/monitor-bot-pr.yml +++ b/.github/workflows/monitor-bot-pr.yml @@ -15,5 +15,5 @@ jobs: contents: write pull-requests: write statuses: read - uses: go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/monitor-bot-pr.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 secrets: inherit diff --git a/.github/workflows/scanner.yml b/.github/workflows/scanner.yml index 6c39433e..860c713b 100644 --- a/.github/workflows/scanner.yml +++ b/.github/workflows/scanner.yml @@ -15,5 +15,5 @@ jobs: permissions: contents: read security-events: write - uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/scanner.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 secrets: inherit diff --git a/.github/workflows/tag-release.yml b/.github/workflows/tag-release.yml index cc5d448e..9f185e9f 100644 --- a/.github/workflows/tag-release.yml +++ b/.github/workflows/tag-release.yml @@ -13,7 +13,7 @@ jobs: name: Create release permissions: contents: write - uses: go-openapi/ci-workflows/.github/workflows/release.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/release.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 with: tag: ${{ github.ref_name }} is-monorepo: 'true' diff --git a/.github/workflows/toolchain-independence.yml b/.github/workflows/toolchain-independence.yml index fbca9497..02fc0e4a 100644 --- a/.github/workflows/toolchain-independence.yml +++ b/.github/workflows/toolchain-independence.yml @@ -40,7 +40,7 @@ jobs: run: | go test -c -o resolvers.test ./internal/builders/resolvers/ go test -c -o integration.test ./internal/integration/ - - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1 + - uses: actions/upload-artifact@cf430e030ddbb5b0abf93d22962f4752f3646cd9 # v7.0.2 with: name: toolchain-test-binaries path: | @@ -58,7 +58,7 @@ jobs: needs: build runs-on: ubuntu-latest steps: - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: toolchain-test-binaries - name: Run resolvers tests with no Go present at all @@ -89,7 +89,7 @@ jobs: - name: Warm the testdata module cache (normal toolchain, before divergence) working-directory: testdata run: go mod download - - uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1 + - uses: actions/download-artifact@9000827ccba6bdab643e8b6fd33ac0654aef8333 # v8.0.2 with: name: toolchain-test-binaries - name: Remove the build-time GOROOT so the divergence is deterministic diff --git a/.github/workflows/update-doc.yml b/.github/workflows/update-doc.yml index 1b3874d5..dbb58eb3 100644 --- a/.github/workflows/update-doc.yml +++ b/.github/workflows/update-doc.yml @@ -37,7 +37,7 @@ jobs: # A called workflow cannot hold more than its caller grants, and an omitted scope # is 'none': without this the run is rejected before it starts. pull-requests: read - uses: go-openapi/ci-workflows/.github/workflows/changed-paths.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/changed-paths.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 with: preset: doc # The preset knows the go-openapi layout — markdown anywhere, the hugo tree under @@ -129,7 +129,7 @@ jobs: # Pinned rather than taken from the runner image: the playground is built here # and nowhere else, so an image bumping its preinstalled node would move the # build with no change of ours. front-end-test.yml covers this version. - uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0 + uses: actions/setup-node@949feb2413d6458794dcd2491c4babbbce0c15c1 # v7.1.0 with: node-version: '22' cache: npm diff --git a/.github/workflows/webhook-announcements.yml b/.github/workflows/webhook-announcements.yml index 642cc860..3d661a21 100644 --- a/.github/workflows/webhook-announcements.yml +++ b/.github/workflows/webhook-announcements.yml @@ -50,7 +50,7 @@ on: jobs: announce: - uses: go-openapi/ci-workflows/.github/workflows/webhook-announcements.yml@cba06a2e6390abfedda6bf1067f44741cbe93650 # v0.6.2 + uses: go-openapi/ci-workflows/.github/workflows/webhook-announcements.yml@69a76bc5d13145693ca13d24a418942b59fce727 # v0.6.3 with: scanned-markdown: README.md # On push: normal before..after diff (empty