chore(deps): update docker/setup-qemu-action action to v4.3.0

Merge pull request 'chore(deps): update dependency golangci/golangci-lint to v2.13.2' (#271 ) from renovate/golangci-golangci-lint-2.x into master
chore(deps): update dependency golangci/golangci-lint to v2.13.2
2026-09-01 12:06:04 +00:00 · 2026-08-28 00:15:53 +00:00 · 2026-08-28 00:05:49 +00:00 · 2026-08-27 21:07:59 +00:00 · 2026-08-27 21:05:40 +00:00 · 2026-08-27 18:09:26 +00:00
6 changed files with 24 additions and 24 deletions
@@ -10,19 +10,19 @@ jobs:
    name: "Upload artifacthub-repo.yml to OCI registry"
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
-    - uses: docker/login-action@v4.2.0
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
      with:
        registry: ${{ github.server_url }}
        username: ${{ github.repository_owner }}
        password: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
-    - uses: docker/login-action@v4.2.0
+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
      with:
        username: ${{ secrets.DOCKER_IO_USERNAME }}
        password: ${{ secrets.DOCKER_IO_PASSWORD }}
-    - uses: oras-project/setup-oras@v2.0.0
+    - uses: oras-project/setup-oras@1d808f7d7f6995cc68b7bf507bfe5c5446e1dc9d # v2.0.1
      with:
-        version: 1.3.2 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
+        version: 1.3.4 # renovate: datasource=github-tags depName=oras-project/oras extractVersion='^v?(?<version>.*)$'
    - name: Push artifacthub-repo.yml to git.cryptic.systems
      run: |
        oras push git.cryptic.systems/volker.raschek/db-wait:artifacthub.io \
@@ -20,10 +20,10 @@ jobs:
        go: [ stable ]
        os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
    steps:
-    - uses: actions/checkout@v6.0.3
-    - uses: actions/setup-go@v6.4.0
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
      with:
        go-version: ${{ matrix.go }}
-    - uses: golangci/golangci-lint-action@v9.2.1
+    - uses: golangci/golangci-lint-action@ba0d7d2ec06a0ea1cb5fa41b2e4a3ab91d21278a # v9.3.0
      with:
-        version: v2.12.2 # renovate: datasource=github-releases depName=golangci/golangci-lint
+        version: v2.13.2 # renovate: datasource=github-releases depName=golangci/golangci-lint
@@ -33,8 +33,8 @@ jobs:
        go: [ stable ]
        os: [ ubuntu-latest-amd64, ubuntu-latest-arm64 ]
    steps:
-    - uses: actions/checkout@v6.0.3
-    - uses: actions/setup-go@v6.4.0
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
      with:
        go-version: ${{ matrix.go }}
    - env:
@@ -13,7 +13,7 @@ jobs:
    name: "Run markdown linter"
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
    - uses: DavidAnson/markdownlint-cli2-action@ded1f9488f68a970bc66ea5619e13e9b52e601cd # v23.2.0
      with:
        globs: '**/*.md'
@@ -12,14 +12,14 @@ jobs:
    name: "Release application"
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
      with:
        fetch-depth: 0
    - name: Install curl
      run: apt-get update && apt-get install --yes curl
    - name: Install syft
      env:
-        SYFT_VERSION: "1.45.1" # renovate: datasource=github-releases depName=anchore/syft
+        SYFT_VERSION: "1.51.1" # renovate: datasource=github-releases depName=anchore/syft
      run: |
        OS="$(uname | tr '[:upper:]' '[:lower:]')"
        ARCH="$(dpkg --print-architecture)"
@@ -31,17 +31,17 @@ jobs:
            "https://github.com/anchore/syft/releases/download/v${SYFT_VERSION}/syft_${SYFT_VERSION}_${OS}_${ARCH}.deb"
        dpkg -i syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
        rm syft_${SYFT_VERSION}_${OS}_${ARCH}.deb
-    - uses: volker-raschek/cosign-installer@v4.1.2-rc3
+    - uses: volker-raschek/cosign-installer@7643eed6736a199595ed2a31e9979ec353a88adb # v4.1.3-rc3
      with:
-        cosign-release: "v3.1.0" # renovate: datasource=github-tags depName=sigstore/cosign
-    - uses: docker/setup-qemu-action@v4.1.0
+        cosign-release: "v3.1.3" # renovate: datasource=github-tags depName=sigstore/cosign
+    - uses: docker/setup-qemu-action@1f40c72289eff860ee54a304f1438e3cff362e0a # v4.3.0
      with:
        image: harbor.cryptic.systems/docker/tonistiigi/binfmt:latest
-    - uses: docker/setup-buildx-action@v4.1.0
-    - uses: actions/setup-go@v6.4.0
+    - uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # v4.3.0
+    - uses: actions/setup-go@924ae3a1cded613372ab5595356fb5720e22ba16 # v6.5.0
      with:
        go-version: stable
-    - uses: docker/login-action@v4.2.0
+    - uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
      with:
        registry: git.cryptic.systems
        username: ${{ github.repository_owner }}
@@ -52,9 +52,9 @@ jobs:
        GITEA_TOKEN: ${{ secrets.GIT_CRYPTIC_SYSTEMS_PACKAGE_REGISTRY_TOKEN }}
        GONOSUMDB: ${{ vars.GONOSUMDB }}
        GOPROXY: ${{ vars.GOPROXY }}
-      uses: goreleaser/goreleaser-action@v7.2.2
+      uses: goreleaser/goreleaser-action@f06c13b6b1a9625abc9e6e439d9c05a8f2190e94 # v7.2.3
      with:
-        version: v2.16.0 # renovate: datasource=github-releases depName=goreleaser/goreleaser
+        version: v2.18.0 # renovate: datasource=github-releases depName=goreleaser/goreleaser
        args: release --clean

  sync-to-hub-docker-io:
@@ -10,8 +10,8 @@ jobs:
  update-description-on-hub-docker-io:
    runs-on: ubuntu-latest
    steps:
-    - uses: actions/checkout@v6.0.3
-    - uses: peter-evans/dockerhub-description@v5.0.0
+    - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6.1.0
+    - uses: peter-evans/dockerhub-description@1b9a80c056b620d92cedb9d9b5a223409c68ddfa # v5.0.0
      with:
        username: ${{ secrets.DOCKER_IO_USERNAME }}
        password: ${{ secrets.DOCKER_IO_PASSWORD }}