feat(deps): bump github.com/google/go-github to v58

feat(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7
tools(deps): bump github.com/cloudflare/circl to 1.3.7
feat(deps): bump golang.org/x/oauth2 from 0.15.0 to 0.16.0
ci/cd(deps): bump actions/download-artifact from 3 to 4
ci/cd(deps): bump actions/setup-go from 4 to 5
ci/cd(deps): bump actions/upload-artifact from 3 to 4

.github/workflows/cd.yml

@@ -14,7 +14,7 @@ jobs:
     steps:
       - uses: actions/checkout@v4
         with: { fetch-depth: 0 }
-      - uses: actions/setup-go@v4
+      - uses: actions/setup-go@v5
         with: { go-version: '1.21', cache: true }
 
       - uses: actions/cache@v3

.github/workflows/ci.healthcheck.yml

@@ -36,7 +36,7 @@ jobs:
         uses: actions/checkout@v4
         with: { fetch-depth: 0 }
       - name: Set up Go environment
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with: { go-version: '${{ matrix.go }}' }
 
       - name: Prepare and run tests

.github/workflows/ci.yml

@@ -32,7 +32,7 @@ jobs:
         uses: actions/checkout@v4
         with: { fetch-depth: 0 }
       - name: Set up Go environment
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with: { go-version: 1.21.x, cache-dependency-path: tools/go.sum }
 
       - name: Prepare and run linter
@@ -56,13 +56,13 @@ jobs:
         uses: actions/checkout@v4
         with: { fetch-depth: 0 }
       - name: Set up Go environment
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with: { go-version: '${{ matrix.go }}' }
 
       - name: Prepare and run tests
         run: make env deps-fetch test-with-coverage
       - name: Store code coverage report
-        uses: actions/upload-artifact@v3
+        uses: actions/upload-artifact@v4
         if: matrix.go == '1.21.x'
         with: { name: code-coverage-report, path: c.out }
 
@@ -80,7 +80,7 @@ jobs:
         with: { fetch-depth: 0 }
 
       - name: Fetch code coverage report
-        uses: actions/download-artifact@v3
+        uses: actions/download-artifact@v4
         with: { name: code-coverage-report }
       - name: Send code coverage report to Codecov (codecov.io)
         uses: codecov/codecov-action@v3

.github/workflows/tools.yml

@@ -26,7 +26,7 @@ jobs:
         uses: actions/checkout@v4
         with: { fetch-depth: 0 }
       - name: Set up Go environment
-        uses: actions/setup-go@v4
+        uses: actions/setup-go@v5
         with: { go-version: 1.21.x, cache-dependency-path: tools/go.sum }
 
       - name: Install and check tools

go.mod

@@ -8,7 +8,7 @@ require (
 	github.com/fatih/color v1.16.0
 	github.com/go-git/go-git/v5 v5.11.0
 	github.com/golang/mock v1.6.0
-	github.com/google/go-github/v57 v57.0.0
+	github.com/google/go-github/v58 v58.0.0
 	github.com/spf13/afero v1.11.0
 	github.com/spf13/cobra v1.8.0
 	github.com/spf13/pflag v1.0.5
@@ -19,7 +19,7 @@ require (
 	go.octolab.org/toolkit/cli v0.6.3
 	go.octolab.org/toolkit/config v0.0.4
 	go.octolab.org/toolkit/protocol v0.1.0
-	golang.org/x/oauth2 v0.15.0
+	golang.org/x/oauth2 v0.16.0
 	golang.org/x/sync v0.6.0
 	gopkg.in/yaml.v2 v2.4.0
 )
@@ -29,7 +29,7 @@ require (
 	github.com/Microsoft/go-winio v0.6.1 // indirect
 	github.com/ProtonMail/go-crypto v0.0.0-20230828082145-3c4c8a2d2371 // indirect
 	github.com/andybalholm/cascadia v1.3.1 // indirect
-	github.com/cloudflare/circl v1.3.3 // indirect
+	github.com/cloudflare/circl v1.3.7 // indirect
 	github.com/cyphar/filepath-securejoin v0.2.4 // indirect
 	github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
 	github.com/emirpasic/gods v1.18.1 // indirect
@@ -63,11 +63,11 @@ require (
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
 	go.uber.org/atomic v1.9.0 // indirect
 	go.uber.org/multierr v1.9.0 // indirect
-	golang.org/x/crypto v0.17.0 // indirect
+	golang.org/x/crypto v0.18.0 // indirect
 	golang.org/x/exp v0.0.0-20230905200255-921286631fa9 // indirect
 	golang.org/x/mod v0.12.0 // indirect
-	golang.org/x/net v0.19.0 // indirect
-	golang.org/x/sys v0.15.0 // indirect
+	golang.org/x/net v0.20.0 // indirect
+	golang.org/x/sys v0.16.0 // indirect
 	golang.org/x/text v0.14.0 // indirect
 	golang.org/x/tools v0.13.0 // indirect
 	google.golang.org/appengine v1.6.7 // indirect

internal/command/hub/root.go

@@ -5,7 +5,7 @@ import (
 	"os"
 	"sync"
 
-	"github.com/google/go-github/v57/github"
+	"github.com/google/go-github/v58/github"
 	"github.com/spf13/cobra"
 	"go.octolab.org/async"
 	"go.octolab.org/safe"

internal/service/github/service.go

@@ -3,7 +3,7 @@ package github
 import (
 	"net/http"
 
-	"github.com/google/go-github/v57/github"
+	"github.com/google/go-github/v58/github"
 )
 
 // New returns a new GitHub service.

tools/go.mod

@@ -43,7 +43,7 @@ require (
 	github.com/cespare/xxhash/v2 v2.1.2 // indirect
 	github.com/charithe/durationcheck v0.0.10 // indirect
 	github.com/chavacava/garif v0.0.0-20230227094218-b8c73b2037b8 // indirect
-	github.com/cloudflare/circl v1.3.3 // indirect
+	github.com/cloudflare/circl v1.3.7 // indirect
 	github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
 	github.com/curioswitch/go-reassign v0.2.0 // indirect
 	github.com/daixiang0/gci v0.10.1 // indirect