From 844fa1bfde9c81bb820dc8aa787d37df964734c5 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Aug 2024 18:17:00 -0500 Subject: [PATCH 1/3] chore: bump golang from 1.22.5-alpine to 1.22.6-alpine (#349) --- Dockerfile | 2 +- Dockerfile-dev | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/Dockerfile b/Dockerfile index 28632486..4e9258b1 100644 --- a/Dockerfile +++ b/Dockerfile @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM golang:1.22.5-alpine@sha256:0d3653dd6f35159ec6e3d10263a42372f6f194c3dea0b35235d72aabde86486e AS build +FROM golang:1.22.6-alpine@sha256:1a478681b671001b7f029f94b5016aed984a23ad99c707f6a0ab6563860ae2f3 AS build WORKDIR /src RUN apk update && apk add --no-cache file git curl RUN curl -sSf https://atlasgo.sh | sh diff --git a/Dockerfile-dev b/Dockerfile-dev index f9c8b6ab..1719b2f1 100644 --- a/Dockerfile-dev +++ b/Dockerfile-dev @@ -12,7 +12,7 @@ # See the License for the specific language governing permissions and # limitations under the License. -FROM golang:1.22.5-alpine@sha256:0d3653dd6f35159ec6e3d10263a42372f6f194c3dea0b35235d72aabde86486e AS build +FROM golang:1.22.6-alpine@sha256:1a478681b671001b7f029f94b5016aed984a23ad99c707f6a0ab6563860ae2f3 AS build WORKDIR /src RUN apk update && apk add --no-cache file git curl RUN curl -sSf https://atlasgo.sh | sh From 800f3b68abd2c36bcc6732de39b4bde7cefd25aa Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Aug 2024 18:23:26 -0500 Subject: [PATCH 2/3] chore: bump github.com/minio/minio-go/v7 from 7.0.74 to 7.0.75 (#350) --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 3206b099..d997d528 100644 --- a/go.mod +++ b/go.mod @@ -20,7 +20,7 @@ require ( github.com/in-toto/go-witness v0.6.0 github.com/kelseyhightower/envconfig v1.4.0 github.com/lib/pq v1.10.9 - github.com/minio/minio-go/v7 v7.0.74 + github.com/minio/minio-go/v7 v7.0.75 github.com/sirupsen/logrus v1.9.3 github.com/spf13/cobra v1.8.1 github.com/stretchr/testify v1.9.0 diff --git a/go.sum b/go.sum index 044800b0..9f7797a2 100644 --- a/go.sum +++ b/go.sum @@ -249,8 +249,8 @@ github.com/miekg/dns v1.1.58 h1:ca2Hdkz+cDg/7eNF6V56jjzuZ4aCAE+DbVkILdQWG/4= github.com/miekg/dns v1.1.58/go.mod h1:Ypv+3b/KadlvW9vJfXOTf300O4UqaHFzFCuHz+rPkBY= github.com/minio/md5-simd v1.1.2 h1:Gdi1DZK69+ZVMoNHRXJyNcxrMA4dSxoYHZSQbirFg34= github.com/minio/md5-simd v1.1.2/go.mod h1:MzdKDxYpY2BT9XQFocsiZf/NKVtR7nkE4RoEpN+20RM= -github.com/minio/minio-go/v7 v7.0.74 h1:fTo/XlPBTSpo3BAMshlwKL5RspXRv9us5UeHEGYCFe0= -github.com/minio/minio-go/v7 v7.0.74/go.mod h1:qydcVzV8Hqtj1VtEocfxbmVFa2siu6HGa+LDEPogjD8= +github.com/minio/minio-go/v7 v7.0.75 h1:0uLrB6u6teY2Jt+cJUVi9cTvDRuBKWSRzSAcznRkwlE= +github.com/minio/minio-go/v7 v7.0.75/go.mod h1:qydcVzV8Hqtj1VtEocfxbmVFa2siu6HGa+LDEPogjD8= github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y= github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0= github.com/mitchellh/go-wordwrap v1.0.1 h1:TLuKupo69TCn6TQSyGxwI1EblZZEsQ0vMlAFQflz0v0= From 5ed399f6fca4879b654ac7d9c29fa618d91227e1 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 12 Aug 2024 18:30:34 -0500 Subject: [PATCH 3/3] chore: bump testifysec/witness-run-action (#352) --- .github/workflows/pipeline.yml | 2 +- .github/workflows/witness.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/workflows/pipeline.yml b/.github/workflows/pipeline.yml index 9ce1de67..b31db25c 100644 --- a/.github/workflows/pipeline.yml +++ b/.github/workflows/pipeline.yml @@ -96,7 +96,7 @@ jobs: run: go install github.com/goreleaser/goreleaser@v1.23.0 - name: Run GoReleaser - uses: testifysec/witness-run-action@cceed291062b350dc658d7d189933ac47d4f4dec + uses: testifysec/witness-run-action@79320a907f611f2fb40ced8e13c66af988b2d9db env: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_REPOSITORY_OWNER: ${{ github.repository_owner }} diff --git a/.github/workflows/witness.yml b/.github/workflows/witness.yml index 87f2f671..144b90ee 100644 --- a/.github/workflows/witness.yml +++ b/.github/workflows/witness.yml @@ -49,7 +49,7 @@ jobs: go-version: 1.21.x - if: ${{ inputs.pull_request == false }} - uses: testifysec/witness-run-action@cceed291062b350dc658d7d189933ac47d4f4dec + uses: testifysec/witness-run-action@79320a907f611f2fb40ced8e13c66af988b2d9db with: witness-install-dir: /opt/witness step: ${{ inputs.step }}