From 2f25a36a5cb35fd84076edbf279593ebe62ed008 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sat, 22 Aug 2026 22:22:54 +0000 Subject: [PATCH] chore(deps): bump the actions group across 1 directory with 3 updates Bumps the actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-go](https://github.com/actions/setup-go) and [actions/setup-node](https://github.com/actions/setup-node). Updates `actions/checkout` from 6 to 7 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v6...v7) Updates `actions/setup-go` from 6 to 7 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v6...v7) Updates `actions/setup-node` from 6 to 7 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v6...v7) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-node dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] --- .github/workflows/ci-gates.yml | 62 +++++++++++++++--------------- .github/workflows/ci.yml | 16 ++++---- .github/workflows/install-test.yml | 6 +-- .github/workflows/nightly.yml | 12 +++--- .github/workflows/release.yml | 8 ++-- 5 files changed, 52 insertions(+), 52 deletions(-) diff --git a/.github/workflows/ci-gates.yml b/.github/workflows/ci-gates.yml index 0b36193..2b6a1a1 100644 --- a/.github/workflows/ci-gates.yml +++ b/.github/workflows/ci-gates.yml @@ -30,7 +30,7 @@ jobs: name: "M1-26 spec-presence gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - name: Check spec-presence @@ -58,10 +58,10 @@ jobs: name: "M1-27 tests-precede-code gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -97,10 +97,10 @@ jobs: name: "M1-28 forge scan all gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -125,8 +125,8 @@ jobs: name: "M1-29 convention lint gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -141,10 +141,10 @@ jobs: name: "M1-30 public-API delta gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Install gorelease @@ -177,10 +177,10 @@ jobs: runs-on: ubuntu-latest # Note: secrets context is not available in job-level if; skip check is done at step runtime. steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -223,8 +223,8 @@ jobs: name: "M1-32 docs-sync gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -238,8 +238,8 @@ jobs: name: "M1-34 repo-hygiene gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -254,10 +254,10 @@ jobs: name: "M1-35 secrets-clean gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -300,10 +300,10 @@ jobs: name: "M2-17 perf benchmark gate (≤5% regression)" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Install benchstat @@ -338,8 +338,8 @@ jobs: name: "M2-20 eval harness proof-of-life" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -372,8 +372,8 @@ jobs: name: "M2-24 postmortem CI gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -404,8 +404,8 @@ jobs: name: "M3-04 NFR budget gate (§14)" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} - name: Build forge @@ -443,7 +443,7 @@ jobs: runs-on: ubuntu-latest if: github.event_name == 'pull_request' steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 - name: Check PR title format @@ -491,7 +491,7 @@ jobs: name: "G-124 no POSIX postinstall in npm packages" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Check packages/*/package.json for postinstall scripts run: | VIOLATIONS=0 @@ -515,8 +515,8 @@ jobs: name: "G-081 ERROR_CODES.md drift check" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} cache: true @@ -533,8 +533,8 @@ jobs: name: "G-049 eval cost gate" runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} cache: true diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml index f088c1a..c2bae2c 100644 --- a/.github/workflows/ci.yml +++ b/.github/workflows/ci.yml @@ -35,8 +35,8 @@ jobs: name: lint (golangci-lint + gofmt + goimports) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} check-latest: true @@ -62,8 +62,8 @@ jobs: name: test (go test) runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} check-latest: true @@ -82,8 +82,8 @@ jobs: name: govulncheck runs-on: ubuntu-latest steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} check-latest: true @@ -108,8 +108,8 @@ jobs: - { goos: windows, goarch: amd64 } - { goos: windows, goarch: arm64 } steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} check-latest: true diff --git a/.github/workflows/install-test.yml b/.github/workflows/install-test.yml index 8920adf..f60d77a 100644 --- a/.github/workflows/install-test.yml +++ b/.github/workflows/install-test.yml @@ -34,7 +34,7 @@ jobs: node: [18, 20, 22] runs-on: ${{ matrix.os }} steps: - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: ${{ matrix.node }} @@ -62,7 +62,7 @@ jobs: os: [ubuntu-latest, macos-latest, windows-latest] runs-on: ${{ matrix.os }} steps: - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 20 @@ -91,7 +91,7 @@ jobs: os: [ubuntu-latest, macos-latest, windows-latest] runs-on: ${{ matrix.os }} steps: - - uses: actions/setup-node@v6 + - uses: actions/setup-node@v7 with: node-version: 20 diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml index a328f2d..9d3aad3 100644 --- a/.github/workflows/nightly.yml +++ b/.github/workflows/nightly.yml @@ -23,10 +23,10 @@ jobs: # The step-level condition checks for a non-empty secret; the job itself always # runs so the summary is always green when keys are absent rather than skipped. steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: go-version-file: go.mod cache: true @@ -55,10 +55,10 @@ jobs: contents: write pull-requests: write steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: go-version-file: go.mod cache: true @@ -134,8 +134,8 @@ jobs: matrix: os: [macos-latest, windows-latest] steps: - - uses: actions/checkout@v6 - - uses: actions/setup-go@v6 + - uses: actions/checkout@v7 + - uses: actions/setup-go@v7 with: go-version: ${{ env.GO_VERSION }} check-latest: true diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 7120e51..cacc32a 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -29,12 +29,12 @@ jobs: outputs: version: ${{ steps.version.outputs.version }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 with: fetch-depth: 0 # goreleaser needs full history for changelog - name: Set up Go - uses: actions/setup-go@v6 + uses: actions/setup-go@v7 with: go-version-file: go.mod check-latest: true @@ -74,10 +74,10 @@ jobs: env: VERSION: ${{ needs.goreleaser.outputs.version }} steps: - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - name: Set up Node - uses: actions/setup-node@v6 + uses: actions/setup-node@v7 with: node-version: '20' registry-url: 'https://registry.npmjs.org'