From 6c9f00aac3af2a90493f3b8b6ca01b1bfe28ce3b Mon Sep 17 00:00:00 2001
From: hisco <39222286+hisco@users.noreply.github.com>
Date: Wed, 1 Jul 2026 16:35:56 +0300
Subject: [PATCH 1/2] chore: upgrade GitHub Actions dependencies

- Bump actions/checkout from v4 to v7 across ci.yml, release.yml, test.yml (15 occurrences)
- Replace codfish/semantic-release-action@v4 with cycjimmy/semantic-release-action pinned to v6.0.0 in release.yml

Claude-Session: https://claude.ai/code/session_011T9ASy4VmRoYrnuTsLd9oU
---
 .github/workflows/ci.yml      |  6 +++---
 .github/workflows/release.yml |  7 ++++---
 .github/workflows/test.yml    | 22 +++++++++++-----------
 3 files changed, 18 insertions(+), 17 deletions(-)

diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index 3c0de2e..4c1db50 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Lint Action Files
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Validate action.yml
         run: |
@@ -88,7 +88,7 @@ jobs:
     runs-on: ubuntu-latest
     name: ShellCheck
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Run ShellCheck on action script
         run: |
@@ -126,7 +126,7 @@ jobs:
             expected_provider: "dockerhub"
             expected_type: "dockerhub"
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test ${{ matrix.test_case.name }}
         uses: ./
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 2062b49..a09bc51 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -13,10 +13,11 @@ jobs:
   release:
     runs-on: ubuntu-latest
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
 
-      - uses: codfish/semantic-release-action@v4
+      - uses: cycjimmy/semantic-release-action@b12c8f6015dc215fe37bc154d4ad456dd3833c90 # v6.0.0
         with:
-          additional-packages: "['semantic-release-github-actions-tags']"
+          extra_plugins: |
+            semantic-release-github-actions-tags
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
\ No newline at end of file
diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml
index de2b702..7d939fe 100644
--- a/.github/workflows/test.yml
+++ b/.github/workflows/test.yml
@@ -11,7 +11,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test AWS ECR Parsing
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test AWS ECR standard format
         uses: ./
@@ -56,7 +56,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test AWS ECR Public Parsing
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test AWS ECR Public format
         uses: ./
@@ -79,7 +79,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test GCP Artifact Registry Parsing
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test GCP Artifact Registry format
         uses: ./
@@ -115,7 +115,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test GCP Container Registry (Legacy) Parsing
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test gcr.io format
         uses: ./
@@ -151,7 +151,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test Azure Container Registry Parsing
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test Azure ACR format
         uses: ./
@@ -185,7 +185,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test GitHub Container Registry Parsing
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test ghcr.io format
         uses: ./
@@ -220,7 +220,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test Docker Hub Parsing
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test Docker Hub short format
         uses: ./
@@ -270,7 +270,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test Generic Registry Parsing
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test generic registry format
         uses: ./
@@ -305,7 +305,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test Environment Variables Export
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test environment variable exports
         uses: ./
@@ -331,7 +331,7 @@ jobs:
     runs-on: ubuntu-latest
     name: Test Edge Cases
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test URL with https protocol
         uses: ./
@@ -361,7 +361,7 @@ jobs:
     name: Test Error Cases
     continue-on-error: true  # Allow this job to complete even if individual steps fail
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v7
       
       - name: Test invalid image format
         id: test-invalid

From 150bff854c16e23f50593cd750ae7750639dbe2f Mon Sep 17 00:00:00 2001
From: hisco <39222286+hisco@users.noreply.github.com>
Date: Wed, 1 Jul 2026 17:53:38 +0300
Subject: [PATCH 2/2] ci: add Dependabot for GitHub Actions

---
 .github/dependabot.yml | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 .github/dependabot.yml

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
new file mode 100644
index 0000000..f6faee6
--- /dev/null
+++ b/.github/dependabot.yml
@@ -0,0 +1,10 @@
+version: 2
+updates:
+  - package-ecosystem: "github-actions"
+    directory: "/"
+    schedule:
+      interval: "weekly"
+    groups:
+      github-actions:
+        patterns:
+          - "*"