From 168c20900cca9733dc188ce5f22af596703e7a9c Mon Sep 17 00:00:00 2001 From: "felix-renovate[bot]" <143542247+felix-renovate[bot]@users.noreply.github.com> Date: Wed, 1 Oct 2025 16:40:54 +0000 Subject: [PATCH] fix(deps): update all non-major dependencies --- .github/workflows/release.yaml | 2 +- .github/workflows/zizmor.yaml | 4 ++-- Dockerfile | 2 +- go.mod | 4 ++-- go.sum | 2 ++ 5 files changed, 8 insertions(+), 6 deletions(-) diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 1882354..2ea9c9b 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -74,7 +74,7 @@ jobs: install-only: true - name: login to ghcr.io - uses: docker/login-action@184bdaa0721073962dff0199f1fb9940f07167d1 # v3 + uses: docker/login-action@5e57cd118135c172c3672efd75eb46360885c0ef # v3 with: registry: ghcr.io username: ${{ github.actor }} diff --git a/.github/workflows/zizmor.yaml b/.github/workflows/zizmor.yaml index 26b7fe2..6dcf0f8 100644 --- a/.github/workflows/zizmor.yaml +++ b/.github/workflows/zizmor.yaml @@ -22,7 +22,7 @@ jobs: persist-credentials: false - name: Install the latest version of uv - uses: astral-sh/setup-uv@557e51de59eb14aaaba2ed9621916900a91d50c6 # v6 + uses: astral-sh/setup-uv@d0cc045d04ccac9d8b7881df0226f9e82c39688e # v6 - name: Run zizmor 🌈 run: uvx zizmor --format sarif . > results.sarif @@ -30,7 +30,7 @@ jobs: GH_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Upload SARIF file - uses: github/codeql-action/upload-sarif@2d92b76c45b91eb80fc44c74ce3fce0ee94e8f9d # v3 + uses: github/codeql-action/upload-sarif@3599b3baa15b485a2e49ef411a7a4bb2452e7f93 # v3 with: sarif_file: results.sarif category: zizmor \ No newline at end of file diff --git a/Dockerfile b/Dockerfile index 22e18c2..e3c541c 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,4 @@ -# syntax=docker/dockerfile:1.18@sha256:dabfc0969b935b2080555ace70ee69a5261af8a8f1b4df97b9e7fbcf6722eddf +# syntax=docker/dockerfile:1.19@sha256:b6afd42430b15f2d2a4c5a02b919e98a525b785b1aaff16747d2f623364e39b6 FROM pscale.dev/wolfi-prod/git:2.51.0 COPY ghcommit /ghcommit diff --git a/go.mod b/go.mod index 8996458..0125aa2 100644 --- a/go.mod +++ b/go.mod @@ -1,13 +1,13 @@ module github.com/planetscale/ghcommit -go 1.23.0 +go 1.24.0 toolchain go1.25.1 require ( github.com/jessevdk/go-flags v1.6.1 github.com/shurcooL/githubv4 v0.0.0-20240727222349-48295856cce7 - golang.org/x/oauth2 v0.30.0 + golang.org/x/oauth2 v0.31.0 ) require ( diff --git a/go.sum b/go.sum index 1bcf4ca..c827432 100644 --- a/go.sum +++ b/go.sum @@ -12,5 +12,7 @@ golang.org/x/oauth2 v0.29.0 h1:WdYw2tdTK1S8olAzWHdgeqfy+Mtm9XNhv/xJsY65d98= golang.org/x/oauth2 v0.29.0/go.mod h1:onh5ek6nERTohokkhCD/y2cV4Do3fxFHFuAejCkRWT8= golang.org/x/oauth2 v0.30.0 h1:dnDm7JmhM45NNpd8FDDeLhK6FwqbOf4MLCM9zb1BOHI= golang.org/x/oauth2 v0.30.0/go.mod h1:B++QgG3ZKulg6sRPGD/mqlHQs5rB3Ml9erfeDY7xKlU= +golang.org/x/oauth2 v0.31.0 h1:8Fq0yVZLh4j4YA47vHKFTa9Ew5XIrCP8LC6UeNZnLxo= +golang.org/x/oauth2 v0.31.0/go.mod h1:lzm5WQJQwKZ3nwavOZ3IS5Aulzxi68dUSgRHujetwEA= golang.org/x/sys v0.31.0 h1:ioabZlmFYtWhL+TRYpcnNlLwhyxaM9kWTDEmfnprqik= golang.org/x/sys v0.31.0/go.mod h1:BJP2sWEmIv4KK5OTEluFJCKSidICx8ciO85XgH3Ak8k=