Visitar URL original
build(deps): bump the actions group across 1 directory with 5 updates by dependabot[bot] · Pull Request #2375 · google/go-containerregistry · GitHub
Skip to content

build(deps): bump the actions group across 1 directory with 5 updates - #2375

Merged
Subserial merged 1 commit into
mainfrom
dependabot/github_actions/actions-8aa40f8986
Jul 24, 2026
Merged

Subserial merged 1 commit into
mainfrom
dependabot/github_actions/actions-8aa40f8986

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the actions group with 5 updates in the / directory:

Package From To
actions/checkout 6 7
actions/setup-go 6 7
aws-actions/configure-aws-credentials 6.2.0 6.2.3
goreleaser/goreleaser-action 7.2.2 7.2.3
golangci/golangci-lint-action 9.2.1 9.3.0

Updates actions/checkout from 6 to 7

Release notes

Sourced from actions/checkout's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/checkout@v6.0.3...v7.0.0

v6.1.0

What's Changed

https://github.blog/changelog/2026-06-18-safer-pull_request_target-defaults-for-github-actions-checkout/ for more details about this breaking change

Full Changelog: actions/checkout@v6.0.3...v6.1.0

v6.0.3

What's Changed

New Contributors

Full Changelog: actions/checkout@v6...v6.0.3

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v7.0.1

v7.0.0

v6.0.3

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

... (truncated)

Commits

Updates actions/setup-go from 6 to 7

Release notes

Sourced from actions/setup-go's releases.

v7.0.0

What's Changed

New Contributors

Full Changelog: actions/setup-go@v6...v7.0.0

v6.5.0

What's Changed

Dependency update

New Contributors

Full Changelog: actions/setup-go@v6...v6.5.0

v6.4.0

What's Changed

Enhancement

Dependency update

Documentation update

New Contributors

Full Changelog: actions/setup-go@v6...v6.4.0

v6.3.0

What's Changed

Full Changelog: actions/setup-go@v6...v6.3.0

v6.2.0

What's Changed

... (truncated)

Commits

Updates aws-actions/configure-aws-credentials from 6.2.0 to 6.2.3

Release notes

Sourced from aws-actions/configure-aws-credentials's releases.

v6.2.3

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

v6.2.2

6.2.2 (2026-07-07)

Miscellaneous Chores

v6.2.1

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)
Changelog

Sourced from aws-actions/configure-aws-credentials's changelog.

6.2.3 (2026-07-22)

Bug Fixes

  • attach git credentials before Tag Major Version push (#1877) (9ae780b)
  • PackedPolicyTooLarge detection in STS tags (#1899) (fa8d6a5)

6.2.2 (2026-07-07)

Miscellaneous Chores

6.2.1 (2026-06-26)

Bug Fixes

  • enforce allowed-account-ids on all auth paths (#1847) (4d281fb)
Commits
  • e6de054 chore(main): release 6.2.3 (#1878)
  • ab3b2ba chore: Update dist
  • fa8d6a5 fix: PackedPolicyTooLarge detection in STS tags (#1899)
  • 42e118a chore(deps-dev): bump markdownlint-cli from 0.49.0 to 0.49.1 (#1896)
  • d86ddfc chore: Update dist
  • 874aaac chore(deps): bump @​aws-sdk/client-sts from 3.1086.0 to 3.1091.0 (#1892)
  • d4341b6 chore: Update dist
  • fe51823 chore(deps-dev): bump @​aws-sdk/credential-provider-env (#1894)
  • a8be382 chore(deps-dev): bump @​biomejs/biome from 2.5.3 to 2.5.4 (#1893)
  • e000376 chore: Update dist
  • Additional commits viewable in compare view

Updates goreleaser/goreleaser-action from 7.2.2 to 7.2.3

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v7.2.3

What's Changed

Full Changelog: goreleaser/goreleaser-action@v7.2.2...v7.2.3

Commits
  • f06c13b chore: update dist
  • d393459 ci: fix job
  • ee731b1 chore: workflow dispatch
  • 55de448 chore(deps): bump js-yaml from 4.1.1 to 4.2.0
  • a4f614e ci: use a GitHub App token to rebuild dist on dependabot PRs (#569)
  • d2d17a6 ci: auto-rebuild dist on dependabot PRs (#568)
  • d13def3 build: regenerate dist after undici 6.27.0 bump (#567)
  • 21549b6 chore(deps): bump undici from 6.24.1 to 6.27.0 (#565)
  • 47c416d ci(deps): bump the actions group with 3 updates (#563)
  • See full diff in compare view

Updates golangci/golangci-lint-action from 9.2.1 to 9.3.0

Release notes

Sourced from golangci/golangci-lint-action's releases.

v9.3.0

What's Changed

Changes

Dependencies

Full Changelog: golangci/golangci-lint-action@v9.2.1...v9.3.0

Commits
  • ba0d7d2 chore: prepare release v9.3.0
  • efd0857 feat: add no-run-logs-group as experimental option (#1403)
  • ed485de build(deps): bump undici from 6.24.0 to 6.27.0
  • 8872e8d build(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 (#1400)
  • b163415 build(deps): bump tmp from 0.2.6 to 0.2.7 (#1399)
  • e52a9f8 build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the github-ac...
  • 8182aa3 build(deps): bump tmp from 0.2.5 to 0.2.6 (#1397)
  • 5403a41 build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 in the github-ac...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies github_actions Pull requests that update Github_actions code labels Jul 22, 2026
@Subserial

Copy link
Copy Markdown

@dependabot recreate

Bumps the actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `6` | `7` |
| [actions/setup-go](https://github.com/actions/setup-go) | `6` | `7` |
| [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials) | `6.2.0` | `6.2.3` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `7.2.2` | `7.2.3` |
| [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) | `9.2.1` | `9.3.0` |



Updates `actions/checkout` from 6 to 7
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v6...v7)

Updates `actions/setup-go` from 6 to 7
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v6...v7)

Updates `aws-actions/configure-aws-credentials` from 6.2.0 to 6.2.3
- [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases)
- [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md)
- [Commits](aws-actions/configure-aws-credentials@v6.2.0...v6.2.3)

Updates `goreleaser/goreleaser-action` from 7.2.2 to 7.2.3
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@v7.2.2...v7.2.3)

Updates `golangci/golangci-lint-action` from 9.2.1 to 9.3.0
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v9.2.1...v9.3.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: actions/setup-go
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: aws-actions/configure-aws-credentials
  dependency-version: 6.2.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: golangci/golangci-lint-action
  dependency-version: 9.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: goreleaser/goreleaser-action
  dependency-version: 7.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/github_actions/actions-8aa40f8986 branch from 5b74145 to 78fc366 Compare July 23, 2026 23:10
@Subserial
Subserial merged commit 76d3597 into main Jul 24, 2026
22 checks passed
@dependabot
dependabot Bot deleted the dependabot/github_actions/actions-8aa40f8986 branch July 24, 2026 18:59
social4hyq pushed a commit to social4hyq/homebrew-core that referenced this pull request Sep 20, 2026
crane 0.21.8

Created-by: HarmonybrewBot
Commit-by: HarmonybrewBot
Merged-by: HarmonybrewBot
Description: Created by `brew bump`

---

Created with `brew bump-formula-pr`.<details>
  <summary>release notes</summary>
  <pre>The artifacts attached to this release are missing SLSA provenance, see #2390.

## What's Changed
* build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in google/go-containerregistry#2353
* build(deps): bump golang.org/x/crypto from 0.45.0 to 0.52.0 in /cmd/krane by @dependabot[bot] in google/go-containerregistry#2367
* build(deps): bump golang.org/x/crypto from 0.50.0 to 0.52.0 in /pkg/authn/k8schain by @dependabot[bot] in google/go-containerregistry#2368
* build(deps): bump golang.org/x/net from 0.49.0 to 0.55.0 in /pkg/authn/kubernetes by @dependabot[bot] in google/go-containerregistry#2363
* build(deps): bump the go-deps group across 3 directories with 7 updates by @dependabot[bot] in google/go-containerregistry#2377
* build(deps): bump the actions group across 1 directory with 5 updates by @dependabot[bot] in google/go-containerregistry#2375
* Reject unsafe Windows archive paths in Extract by @Haihan-Jiang in google/go-containerregistry#2330
* feat(goreleaser): add loong64 build support for crane/gcrane/krane by @xuxiaowei-com-cn in google/go-containerregistry#2358
* Document tag and digest reference semantics by @Haihan-Jiang in google/go-containerregistry#2325
* remote: release pull limiter slot when body is read to EOF by @knQzx in google/go-containerregistry#2373
* tarball: bounds-check layer index in uncompressed LayerByDiffID by @arpitjain099 in google/go-containerregistry#2370
* authn: read Podman auth from XDG config by @vigneshakaviki in google/go-containerregistry#2379
* transport: per-host bearer token exchange on cross-host redirect by @amitzig in google/go-containerregistry#2360
* mutate: bounds-check layer index when building rebase addendums by @arpitjain099 in google/go-containerregistry#2371
* fix(daemon): copy ExposedPorts from source config in computeImageConfig by @x64vps in google/go-containerregistry#2356
* feat(remote): add WithReferrersTagFallback option by @kevinmdavis in google/go-containerregistry#2366
* mutate: apply opaque-directory whiteouts (.wh..wh..opq) in Extract by @sadmanf in google/go-containerregistry#2372
* tarball: use correct file extension for zstd/uncompressed by @milas in google/go-containerregistry#2382
* build(deps): bump github.com/moby/moby/client from 0.5.0 to 0.5.1 in the go-deps group across 1 directory by @dependabot[bot] in google/go-containerregistry#2380
* actions: update actions to be pinned by hash by @Subserial in google/go-containerregistry#2384
* Bump go version to 1.26.5 by @Subserial in google/go-containerregistry#2388

## New Contributors
* @xuxiaowei-com-cn made their first contribution in google/go-containerregistry#2358
* @knQzx made their first contribution in google/go-containerregistry#2373
* @arpitjain099 made their first contribution in google/go-containerregistry#2370
* @vigneshakaviki made their first contribution in google/go-containerregistry#2379
* @amitzig made their first contribution in google/go-containerregistry#2360
* @x64vps made their first contribution in google/go-containerregistry#2356
* @kevinmdavis made their first contribution in google/go-containerregistry#2366
* @sadmanf made their first contribution in google/go-containerregistry#2372

**Full Changelog**: https://github.com/google/go-containerregistry/compare/v0.21.7...v0.21.8</pre>
  <p>View the full release notes at <a href="https://github.com/google/go-containerregistry/releases/tag/v0.21.8">https://github.com/google/go-containerregistry/releases/tag/v0.21.8</a>.</p>
</details>
<hr>

See merge request: Harmonybrew/homebrew-core!15552
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies github_actions Pull requests that update Github_actions code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant