From dbdc80d64f8559c60a8ac473c1da73438a9f109b Mon Sep 17 00:00:00 2001 From: mrz1836 Date: Sun, 10 May 2026 16:14:43 -0400 Subject: [PATCH] sync: update tool versions in CI configuration --- .github/env/00-core.env | 2 +- .github/env/10-coverage.env | 2 +- .github/env/10-mage-x.env | 4 ++-- .github/env/10-pre-commit.env | 6 +++--- .github/workflows/codeql-analysis.yml | 6 +++--- .github/workflows/scorecard.yml | 2 +- 6 files changed, 11 insertions(+), 11 deletions(-) diff --git a/.github/env/00-core.env b/.github/env/00-core.env index f4b19e8..77fe3e9 100644 --- a/.github/env/00-core.env +++ b/.github/env/00-core.env @@ -29,7 +29,7 @@ GO_PRIMARY_VERSION=1.24.x GO_SECONDARY_VERSION=1.24.x # Govulncheck-specific Go version for vulnerability scanning -GOVULNCHECK_GO_VERSION=1.26.2 +GOVULNCHECK_GO_VERSION=1.26.3 # ================================================================================================ # đŸ“Ļ GO MODULE CONFIGURATION diff --git a/.github/env/10-coverage.env b/.github/env/10-coverage.env index cc18773..852823a 100644 --- a/.github/env/10-coverage.env +++ b/.github/env/10-coverage.env @@ -32,7 +32,7 @@ GO_COVERAGE_PROVIDER=internal CODECOV_TOKEN_REQUIRED=false # Go Coverage Tool Version -GO_COVERAGE_VERSION=v1.3.9 +GO_COVERAGE_VERSION=v1.4.0 GO_COVERAGE_USE_LOCAL=false # ================================================================================================ diff --git a/.github/env/10-mage-x.env b/.github/env/10-mage-x.env index f302e65..2c49222 100644 --- a/.github/env/10-mage-x.env +++ b/.github/env/10-mage-x.env @@ -60,8 +60,8 @@ MAGE_X_FORMAT_EXCLUDE_PATHS=vendor,node_modules,.git,.idea # ================================================================================================ MAGE_X_GITLEAKS_VERSION=8.30.1 -MAGE_X_GOFUMPT_VERSION=v0.9.2 -MAGE_X_GOLANGCI_LINT_VERSION=v2.11.4 +MAGE_X_GOFUMPT_VERSION=v0.10.0 +MAGE_X_GOLANGCI_LINT_VERSION=v2.12.2 MAGE_X_GORELEASER_VERSION=v2.15.4 MAGE_X_GOVULNCHECK_VERSION=v1.1.4 MAGE_X_GO_SECONDARY_VERSION=1.24.x diff --git a/.github/env/10-pre-commit.env b/.github/env/10-pre-commit.env index 642ea6e..bde02ef 100644 --- a/.github/env/10-pre-commit.env +++ b/.github/env/10-pre-commit.env @@ -26,7 +26,7 @@ # đŸĒ PRE-COMMIT TOOL VERSION # ================================================================================================ -GO_PRE_COMMIT_VERSION=v1.8.2 +GO_PRE_COMMIT_VERSION=v1.8.3 GO_PRE_COMMIT_USE_LOCAL=false # ================================================================================================ @@ -52,8 +52,8 @@ GO_PRE_COMMIT_ALL_FILES=true # đŸ› ī¸ TOOL VERSIONS # ================================================================================================ -GO_PRE_COMMIT_GOLANGCI_LINT_VERSION=v2.11.4 -GO_PRE_COMMIT_FUMPT_VERSION=v0.9.2 +GO_PRE_COMMIT_GOLANGCI_LINT_VERSION=v2.12.2 +GO_PRE_COMMIT_FUMPT_VERSION=v0.10.0 GO_PRE_COMMIT_GOIMPORTS_VERSION=latest GO_PRE_COMMIT_GITLEAKS_VERSION=v8.30.1 diff --git a/.github/workflows/codeql-analysis.yml b/.github/workflows/codeql-analysis.yml index c5c7e90..4c29e92 100644 --- a/.github/workflows/codeql-analysis.yml +++ b/.github/workflows/codeql-analysis.yml @@ -46,7 +46,7 @@ jobs: # Initializes the CodeQL tools for scanning. - name: Initialize CodeQL - uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3 + uses: github/codeql-action/init@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4 with: languages: ${{ matrix.language }} # If you wish to specify custom queries, you can do so here or in a config file. @@ -57,7 +57,7 @@ jobs: # Autobuild attempts to build any compiled languages (C/C++, C#, or Java). # If this step fails, then you should remove it and run the build manually (see below) - name: Autobuild - uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3 + uses: github/codeql-action/autobuild@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4 # â„šī¸ Command-line programs to run using the OS shell. # 📚 https://git.io/JvXDl @@ -67,4 +67,4 @@ jobs: # uses a compiled language - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3 + uses: github/codeql-action/analyze@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4 diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index 926a6e8..7f34ef4 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -76,6 +76,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard (optional). # Commenting out will disable the upload of results to your repo's Code Scanning dashboard - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@e46ed2cbd01164d986452f91f178727624ae40d7 # v4.35.3 + uses: github/codeql-action/upload-sarif@68bde559dea0fdcac2102bfdf6230c5f70eb485e # v4.35.4 with: sarif_file: results.sarif