chore(deps): update actions #160

Merged
CSRBot merged 1 commits from renovate/actions into master 2026-05-01 17:18:11 +02:00
Collaborator

This PR contains the following updates:

Package Type Update Change
anchore/syft minor 1.42.41.43.0
golangci/golangci-lint uses-with minor v2.11.4v2.12.0
goreleaser/goreleaser-action action minor v7.1.0v7.2.1

Release Notes

anchore/syft (anchore/syft)

v1.43.0

Compare Source

Added Features
Bug Fixes
Additional Changes

(Full Changelog)

golangci/golangci-lint (golangci/golangci-lint)

v2.12.0

Compare Source

Released on 2026-05-01

  1. New linters
  2. Linters new features or changes
    • dupl: from f665c8d to c99c5cf (extended detection)
    • funcorder: from 0.5.0 to 0.6.0 (new option: function)
    • goconst: add an option to ignore strings from tests
    • goconst: from 1.8.2 to 1.10.0 (extended detection)
    • gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)
    • gosec: from 619ce21 to 2.26.1 (new checks: G124, G708, G709, G710)
    • govet: add inline analyzer
    • makezero: from 2.1.0 to 2.2.1 (support slice type aliases)
    • paralleltest: expose checkcleanup option
    • sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)
    • wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)
  3. Linters bug fixes
    • forbidigo: from 2.3.0 to 2.3.1
    • godot: from 1.5.4 to 1.5.6
    • govet-modernize: from 0.43.0 to 0.44.0
    • ireturn: from 0.4.0 to 0.4.1
    • rowserrcheck: from 1.1.1 to c5f79b8
  4. Misc.
    • Decrease cache entropy
    • Embed the JSON schema in the binary
    • Filter env vars when cloning the repository with the custom command
goreleaser/goreleaser-action (goreleaser/goreleaser-action)

v7.2.1

Compare Source

This fully removes the usage of the old nightly moving tag.

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1

v7.2.0

Compare Source

What's Changed

Full Changelog: https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [anchore/syft](https://github.com/anchore/syft) | | minor | `1.42.4` → `1.43.0` | | [golangci/golangci-lint](https://github.com/golangci/golangci-lint) | uses-with | minor | `v2.11.4` → `v2.12.0` | | [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | action | minor | `v7.1.0` → `v7.2.1` | --- ### Release Notes <details> <summary>anchore/syft (anchore/syft)</summary> ### [`v1.43.0`](https://github.com/anchore/syft/releases/tag/v1.43.0) [Compare Source](https://github.com/anchore/syft/compare/v1.42.4...v1.43.0) ##### Added Features - added deno bin classifiers \[[#&#8203;4677](https://github.com/anchore/syft/pull/4677) [@&#8203;rezmoss](https://github.com/rezmoss)] - Support haskell old versions \[[#&#8203;3237](https://github.com/anchore/syft/issues/3237) [#&#8203;4793](https://github.com/anchore/syft/pull/4793) [@&#8203;witchcraze](https://github.com/witchcraze)] - Add support for OpenLDAP binary detection \[[#&#8203;4768](https://github.com/anchore/syft/issues/4768) [#&#8203;4755](https://github.com/anchore/syft/pull/4755) [@&#8203;nadimz](https://github.com/nadimz)] - Support erlang ols versions \[[#&#8203;3235](https://github.com/anchore/syft/issues/3235) [#&#8203;4766](https://github.com/anchore/syft/pull/4766) [@&#8203;witchcraze](https://github.com/witchcraze)] ##### Bug Fixes - improve redhat-release parsing fallback for RHEL clones \[[#&#8203;4808](https://github.com/anchore/syft/pull/4808) [@&#8203;westonsteimel](https://github.com/westonsteimel)] - fix format string in search results struct \[[#&#8203;4775](https://github.com/anchore/syft/pull/4775) [@&#8203;willmurphyscode](https://github.com/willmurphyscode)] - prevent infinite recursion in Document.UnmarshalJSON with encoding/json/v2 \[[#&#8203;4748](https://github.com/anchore/syft/pull/4748) [@&#8203;benja-M-1](https://github.com/benja-M-1)] - Syft can not complete scanning golang image \[[#&#8203;4686](https://github.com/anchore/syft/issues/4686)] - javascript-package-cataloger drops entire package.json when authors/contributors/maintainers is a single string \[[#&#8203;4778](https://github.com/anchore/syft/issues/4778) [#&#8203;4779](https://github.com/anchore/syft/pull/4779) [@&#8203;yoav-orca](https://github.com/yoav-orca)] - pnpm lock file cataloger produces unstable output \[[#&#8203;4648](https://github.com/anchore/syft/issues/4648) [#&#8203;4765](https://github.com/anchore/syft/pull/4765) [@&#8203;lawrence3699](https://github.com/lawrence3699)] - Linux Kernel bzImage and zImage not cataloged by linux-kernel-cataloger \[[#&#8203;4769](https://github.com/anchore/syft/issues/4769) [#&#8203;4751](https://github.com/anchore/syft/pull/4751) [@&#8203;nadimz](https://github.com/nadimz)] - Support istio binary (pilot-discovery, pilot-agent) alpha,beta,rc,dev version \[[#&#8203;4546](https://github.com/anchore/syft/issues/4546) [#&#8203;4645](https://github.com/anchore/syft/pull/4645) [@&#8203;witchcraze](https://github.com/witchcraze)] - Scanning mounted ISO: duplicate entries \[[#&#8203;4759](https://github.com/anchore/syft/issues/4759)] ##### Additional Changes - update CPE dictionary index \[[#&#8203;4767](https://github.com/anchore/syft/pull/4767) [@&#8203;anchore-oss-update-bot](https://github.com/anchore-oss-update-bot)] **[(Full Changelog)](https://github.com/anchore/syft/compare/v1.42.4...v1.43.0)** </details> <details> <summary>golangci/golangci-lint (golangci/golangci-lint)</summary> ### [`v2.12.0`](https://github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2120) [Compare Source](https://github.com/golangci/golangci-lint/compare/v2.11.4...v2.12.0) *Released on 2026-05-01* 1. New linters - Add `clickhouselint` linter <https://github.com/ClickHouse/clickhouse-go-linter> 2. Linters new features or changes - `dupl`: from [`f665c8d`](https://github.com/golangci/golangci-lint/commit/f665c8d69b32) to [`c99c5cf`](https://github.com/golangci/golangci-lint/commit/c99c5cf5c202) (extended detection) - `funcorder`: from 0.5.0 to 0.6.0 (new option: `function`) - `goconst`: add an option to ignore strings from tests - `goconst`: from 1.8.2 to 1.10.0 (extended detection) - `gomodguard_v2`: from 1.4.1 to 2.1.0 (major version with new configuration) - `gosec`: from [`619ce21`](https://github.com/golangci/golangci-lint/commit/619ce2117e08) to 2.26.1 (new checks: `G124`, `G708`, `G709`, `G710`) - `govet`: add `inline` analyzer - `makezero`: from 2.1.0 to 2.2.1 (support slice type aliases) - `paralleltest`: expose `checkcleanup` option - `sloglint`: from 0.11.1 to 0.12.0 (new options: `allowed-keys`, `custom-funcs`) - `wsl_v5`: from 5.6.0 to 5.8.0 (new option: `cuddle-max-statements`; new checks: `after-decl`, `after-defer`, `after-expr`, `after-go`, `cuddle-group`) 3. Linters bug fixes - `forbidigo`: from 2.3.0 to 2.3.1 - `godot`: from 1.5.4 to 1.5.6 - `govet-modernize`: from 0.43.0 to 0.44.0 - `ireturn`: from 0.4.0 to 0.4.1 - `rowserrcheck`: from 1.1.1 to [`c5f79b8`](https://github.com/golangci/golangci-lint/commit/c5f79b8) 4. Misc. - Decrease cache entropy - Embed the JSON schema in the binary - Filter env vars when cloning the repository with the `custom` command </details> <details> <summary>goreleaser/goreleaser-action (goreleaser/goreleaser-action)</summary> ### [`v7.2.1`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.1) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1) This fully removes the usage of the old `nightly` moving tag. **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7.2.0...v7.2.1> ### [`v7.2.0`](https://github.com/goreleaser/goreleaser-action/releases/tag/v7.2.0) [Compare Source](https://github.com/goreleaser/goreleaser-action/compare/v7.1.0...v7.2.0) #### What's Changed - test: cover install across release eras by [@&#8203;caarlos0](https://github.com/caarlos0) in [#&#8203;555](https://github.com/goreleaser/goreleaser-action/pull/555) - feat: add `version-file` input by [@&#8203;caarlos0](https://github.com/caarlos0) in [#&#8203;556](https://github.com/goreleaser/goreleaser-action/pull/556) - feat: resolve nightly to latest vX.Y.Z-<sha>-nightly release by [@&#8203;caarlos0](https://github.com/caarlos0) in [#&#8203;558](https://github.com/goreleaser/goreleaser-action/pull/558) **Full Changelog**: <https://github.com/goreleaser/goreleaser-action/compare/v7...v7.2.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzYuMyIsInVwZGF0ZWRJblZlciI6IjQzLjEzNi4zIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbInJlbm92YXRlL2F1dG9tZXJnZSIsInJlbm92YXRlL2dpdGh1Yi1hY3Rpb24iLCJyZW5vdmF0ZS9nb2xhbmciXX0=-->
CSRBot scheduled this pull request to auto merge when all checks succeed 2026-04-27 11:04:10 +02:00
volker.raschek was assigned by CSRBot 2026-04-28 17:06:32 +02:00
CSRBot added 1 commit 2026-05-01 17:05:31 +02:00
chore(deps): update actions
All checks were successful
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (push) Successful in 24s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-amd64) (pull_request) Successful in 17s
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (push) Successful in 11s
Run Golang tests / Run unit tests (stable, ubuntu-latest-amd64) (pull_request) Successful in 10s
Lint Markdown files / Run markdown linter (pull_request) Successful in 7s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (push) Successful in 1m51s
Lint Golang files / Run golang CI linter (stable, ubuntu-latest-arm64) (pull_request) Successful in 34s
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (push) Successful in 1m2s
Run Golang tests / Run unit tests (stable, ubuntu-latest-arm64) (pull_request) Successful in 26s
0d04e79acb
CSRBot force-pushed renovate/actions from 5cd1a521ee to 0d04e79acb 2026-05-01 17:05:31 +02:00 Compare
CSRBot merged commit 889e772e55 into master 2026-05-01 17:18:10 +02:00
CSRBot deleted branch renovate/actions 2026-05-01 17:18:16 +02:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: volker.raschek/dcmerge#160