From 3500496fa6e453dd44cfe1bbaeeac741b4105e9d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 23 Aug 2026 22:03:26 +0000 Subject: [PATCH] build(deps): bump the github-actions group across 1 directory with 2 updates Bumps the github-actions group with 2 updates in the /.github/actions/bootstrap directory: [actions/setup-go](https://github.com/actions/setup-go) and [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action). Updates `actions/setup-go` from 6 to 7 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v6...v7) Updates `docker/setup-buildx-action` from 4.2.0 to 4.3.0 - [Release notes](https://github.com/docker/setup-buildx-action/releases) - [Commits](https://github.com/docker/setup-buildx-action/compare/bb05f3f5519dd87d3ba754cc423b652a5edd6d2c...37fe631027851001ddb9b187196cc803df7f5f0e) --- updated-dependencies: - dependency-name: actions/setup-go dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: docker/setup-buildx-action dependency-version: 4.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/actions/bootstrap/action.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/actions/bootstrap/action.yml b/.github/actions/bootstrap/action.yml index 914872a3..e0af8969 100644 --- a/.github/actions/bootstrap/action.yml +++ b/.github/actions/bootstrap/action.yml @@ -12,7 +12,7 @@ runs: using: "composite" steps: - - uses: actions/setup-go@v6 + - uses: actions/setup-go@v7 with: go-version-file: 'go.mod' @@ -23,7 +23,7 @@ runs: - name: Set up Docker Buildx if: "${{ inputs.goreleaser == 'true' }}" - uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c + uses: docker/setup-buildx-action@37fe631027851001ddb9b187196cc803df7f5f0e # See https://goreleaser.com/blog/supply-chain-security/ - name: installs syft for generating the SBOM with goreleaser