From 0c58248a96ee8d2263dfdfa5969d07a99bd7ee2b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 16 Dec 2025 18:01:44 +0000 Subject: [PATCH 1/2] build(deps): bump actions/checkout from 5.0.0 to 6.0.1 Bumps [actions/checkout](https://github.com/actions/checkout) from 5.0.0 to 6.0.1. - [Release notes](https://github.com/actions/checkout/releases) - [Commits](https://github.com/actions/checkout/compare/v5...v6.0.1) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: 6.0.1 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 2 +- .github/workflows/release.yaml | 2 +- .github/workflows/reusable-go-ci.yaml | 10 +++++----- .github/workflows/scorecard.yml | 2 +- 4 files changed, 8 insertions(+), 8 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index af550ef..69713ea 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -55,7 +55,7 @@ jobs: # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages steps: - name: Checkout repository - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # pin@v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # pin@v6.0.1 # Add any setup steps before running the `github/codeql-action/init` action. # This includes steps like installing compilers or runtimes (`actions/setup-node` diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index 419dcf7..4cc2ff8 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -20,7 +20,7 @@ jobs: app_id: ${{ secrets.BOT_APP_ID }} private_key: ${{ secrets.BOT_PRIVATE_KEY }} - name: Checkout - uses: actions/checkout@v5.0.0 + uses: actions/checkout@v6.0.1 with: fetch-depth: 0 token: ${{ steps.generate_token.outputs.token }} diff --git a/.github/workflows/reusable-go-ci.yaml b/.github/workflows/reusable-go-ci.yaml index c2dea48..d9485f1 100644 --- a/.github/workflows/reusable-go-ci.yaml +++ b/.github/workflows/reusable-go-ci.yaml @@ -75,7 +75,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # pin@v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # pin@v6.0.1 with: fetch-depth: ${{ inputs.run_code_analysis && 0 || 1 }} @@ -111,7 +111,7 @@ jobs: test_reports_artifact_id: ${{ steps.upload_test_reports_artifact_step.outputs.artifact-id }} steps: - name: Checkout Code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # pin@v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # pin@v6.0.1 with: fetch-depth: ${{ inputs.run_code_analysis && 0 || 1 }} @@ -216,7 +216,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # pin@v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # pin@v6.0.1 with: fetch-depth: ${{ inputs.run_code_analysis && 0 || 1 }} @@ -248,7 +248,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout Code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # pin@v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # pin@v6.0.1 with: fetch-depth: 0 # CodeQL requires full history @@ -303,7 +303,7 @@ jobs: image_digest: ${{ steps.build_image_ko_step.outputs.digest }} steps: - name: Checkout Code - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # pin@v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # pin@v6.0.1 with: fetch-depth: ${{ inputs.run_code_analysis && 0 || 1 }} diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 9c268d6..b35b96a 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -32,7 +32,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@08c6903cd8c0fde910a37f88322edcfb5dd907a8 # v5.0.0 + uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # v6.0.1 with: persist-credentials: false From 9606153f8213f21048877d665b179f12d1ad3e07 Mon Sep 17 00:00:00 2001 From: Bjoern Kottner <1780890+BjoernKarma@users.noreply.github.com> Date: Mon, 5 Jan 2026 14:27:41 +0000 Subject: [PATCH 2/2] fix: fixed the "Duplicate header: Authorization" error in the govulncheck job --- .github/workflows/reusable-go-ci.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/reusable-go-ci.yaml b/.github/workflows/reusable-go-ci.yaml index d9485f1..66830d2 100644 --- a/.github/workflows/reusable-go-ci.yaml +++ b/.github/workflows/reusable-go-ci.yaml @@ -219,6 +219,7 @@ jobs: uses: actions/checkout@8e8c483db84b4bee98b60c0593521ed34d9990e8 # pin@v6.0.1 with: fetch-depth: ${{ inputs.run_code_analysis && 0 || 1 }} + persist-credentials: false - name: Setup Go uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # pin@6.1.0