ci: upgraded gh-actions to v1.4.8

fredbi · fredbi · commit 34a5baa33361 · 2026-03-07T17:35:51.000+01:00
Signed-off-by: Frederic BIDON &lt;fredbi@yahoo.com&gt;
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
@@ -152,7 +152,7 @@ jobs:
         run: gh pr review --approve "$PR_URL"
       -
         name: Wait for all workflow runs to complete
-        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
         with:
           pr-url: ${{ env.PR_URL }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/bump-release-monorepo.yml b/.github/workflows/bump-release-monorepo.yml
@@ -136,7 +136,7 @@ jobs:
       -
         name: Detect go mono-repo
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
 
   bump-release-single:
     name: Bump release (single module)
@@ -195,7 +195,7 @@ jobs:
       -
         name: Determine next tag
         id: bump-release
-        uses: go-openapi/gh-actions/ci-jobs/next-tag@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/next-tag@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
         with:
           bump-patch: ${{ steps.bump-check.outputs.bump-patch }}
           bump-minor: ${{ steps.bump-check.outputs.bump-minor }}
@@ -307,7 +307,7 @@ jobs:
       -
         name: Configure bot credentials
         if: ${{ inputs.enable-tag-signing == 'true' }}
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
         # This is using the GPG signature of bot-go-openapi.
         #
         # For go-openapi repos (using secrets: inherit):
diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml
@@ -114,15 +114,15 @@ jobs:
       -
         name: Determine next tag
         id: bump-release
-        uses: go-openapi/gh-actions/ci-jobs/next-tag@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/next-tag@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
         with:
           bump-patch: ${{ steps.bump-check.outputs.bump-patch }}
           bump-minor: ${{ steps.bump-check.outputs.bump-minor }}
           bump-major: ${{ steps.bump-check.outputs.bump-major }}
       -
         name: Configure bot credentials
         if: ${{ inputs.enable-tag-signing == 'true' }}
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
         # This is using the GPG signature of bot-go-openapi.
         #
         # For go-openapi repos (using secrets: inherit):
diff --git a/.github/workflows/collect-reports.yml b/.github/workflows/collect-reports.yml
@@ -32,7 +32,7 @@ jobs:
           path: reports/
       -
         name: Install go-junit-report
-        uses: go-openapi/gh-actions/install/go-junit-report@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/install/go-junit-report@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
       -
         name: Convert test reports to a merged JUnit XML
         # NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics.
@@ -57,7 +57,7 @@ jobs:
           verbose: true
       -
         name: Install go-ctrf-json-reporter
-        uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
       -
         name: Convert test reports to CTRF JSON
         # description: |
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
@@ -118,7 +118,7 @@ jobs:
             } > "${file}"
           done
       - name: Configure bot credentials
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
         id: bot-credentials
         # For go-openapi repos (using secrets: inherit):
         #   Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc.
@@ -183,7 +183,7 @@ jobs:
       - name: Auto-approve PR
         run: gh pr review --approve "$PR_URL"
       - name: Wait for all workflow runs to complete
-        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
         with:
           pr-url: ${{ env.PR_URL }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/go-test-monorepo.yml b/.github/workflows/go-test-monorepo.yml
@@ -42,7 +42,7 @@ jobs:
       -
         name: Detect go mono-repo
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
       -
         name: golangci-lint [monorepo]
         # golangci-action v9.1+ has an experimental built-in mono repo detection setup.
@@ -111,10 +111,10 @@ jobs:
       -
         name: Detect go version capabilities
         id: detect-go-version
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-version@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-version@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
       -
         name: Install gotestsum
-        uses: go-openapi/gh-actions/install/gotestsum@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/install/gotestsum@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
       -
         name: Ensure TMP is created on windows runners
         # On windows, some tests require testing.TempDir to reside on the same drive as the code.
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
@@ -58,7 +58,7 @@ jobs:
           cache: true
       -
         name: Install gotestsum
-        uses: go-openapi/gh-actions/install/gotestsum@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/install/gotestsum@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
       -
         name: Ensure TMP is created on windows runners
         # On windows, some tests require testing.TempDir to reside on the same drive as the code.
diff --git a/.github/workflows/prepare-release-monorepo.yml b/.github/workflows/prepare-release-monorepo.yml
@@ -108,7 +108,7 @@ jobs:
           cache-dependency-path: "**/go.sum"
       - name: Detect go mono-repo
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
       - name: Update go.mod files for new release
         env:
           TARGET_TAG: ${{ inputs.target-tag }}
@@ -181,7 +181,7 @@ jobs:
           echo "::notice title=changes::Git status after updates"
           git status --short
       - name: Configure bot credentials
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
         id: bot-credentials
         # For go-openapi repos (using secrets: inherit):
         #   Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc.
@@ -264,7 +264,7 @@ jobs:
         run: gh pr review --approve "$PR_URL"
       - name: Wait for all workflow runs to complete
         if: ${{ needs.prepare-modules.outputs.pull-request-url != '' }}
-        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
         with:
           pr-url: ${{ env.PR_URL }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -89,7 +89,7 @@ jobs:
         name: Detect go mono-repo
         if: ${{ inputs.is-monorepo == 'true' }}
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8
       -
         name: Install git-cliff
         uses: taiki-e/install-action@385db9cc6bf65d19775b02084a4b698eaca9a4f2 # v2.68.19

Original file line number	Diff line number	Diff line change
`@@ -152,7 +152,7 @@ jobs:`
`152`	`152`	`run: gh pr review --approve "$PR_URL"`
`153`	`153`	`-`
`154`	`154`	`name: Wait for all workflow runs to complete`
`155`		`- uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`155`	`+ uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`156`	`156`	`with:`
`157`	`157`	`pr-url: ${{ env.PR_URL }}`
`158`	`158`	`github-token: ${{ secrets.GITHUB_TOKEN }}`
Original file line number	Diff line number	Diff line change
`@@ -136,7 +136,7 @@ jobs:`
`136`	`136`	`-`
`137`	`137`	`name: Detect go mono-repo`
`138`	`138`	`id: detect-monorepo`
`139`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`139`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`140`	`140`
`141`	`141`	`bump-release-single:`
`142`	`142`	`name: Bump release (single module)`
`@@ -195,7 +195,7 @@ jobs:`
`195`	`195`	`-`
`196`	`196`	`name: Determine next tag`
`197`	`197`	`id: bump-release`
`198`		`- uses: go-openapi/gh-actions/ci-jobs/next-tag@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`198`	`+ uses: go-openapi/gh-actions/ci-jobs/next-tag@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`199`	`199`	`with:`
`200`	`200`	`bump-patch: ${{ steps.bump-check.outputs.bump-patch }}`
`201`	`201`	`bump-minor: ${{ steps.bump-check.outputs.bump-minor }}`
`@@ -307,7 +307,7 @@ jobs:`
`307`	`307`	`-`
`308`	`308`	`name: Configure bot credentials`
`309`	`309`	`if: ${{ inputs.enable-tag-signing == 'true' }}`
`310`		`- uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`310`	`+ uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`311`	`311`	`# This is using the GPG signature of bot-go-openapi.`
`312`	`312`	`#`
`313`	`313`	`# For go-openapi repos (using secrets: inherit):`
Original file line number	Diff line number	Diff line change
`@@ -114,15 +114,15 @@ jobs:`
`114`	`114`	`-`
`115`	`115`	`name: Determine next tag`
`116`	`116`	`id: bump-release`
`117`		`- uses: go-openapi/gh-actions/ci-jobs/next-tag@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`117`	`+ uses: go-openapi/gh-actions/ci-jobs/next-tag@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`118`	`118`	`with:`
`119`	`119`	`bump-patch: ${{ steps.bump-check.outputs.bump-patch }}`
`120`	`120`	`bump-minor: ${{ steps.bump-check.outputs.bump-minor }}`
`121`	`121`	`bump-major: ${{ steps.bump-check.outputs.bump-major }}`
`122`	`122`	`-`
`123`	`123`	`name: Configure bot credentials`
`124`	`124`	`if: ${{ inputs.enable-tag-signing == 'true' }}`
`125`		`- uses: go-openapi/gh-actions/ci-jobs/bot-credentials@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`125`	`+ uses: go-openapi/gh-actions/ci-jobs/bot-credentials@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`126`	`126`	`# This is using the GPG signature of bot-go-openapi.`
`127`	`127`	`#`
`128`	`128`	`# For go-openapi repos (using secrets: inherit):`
Original file line number	Diff line number	Diff line change
`@@ -32,7 +32,7 @@ jobs:`
`32`	`32`	`path: reports/`
`33`	`33`	`-`
`34`	`34`	`name: Install go-junit-report`
`35`		`- uses: go-openapi/gh-actions/install/go-junit-report@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`35`	`+ uses: go-openapi/gh-actions/install/go-junit-report@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`36`	`36`	`-`
`37`	`37`	`name: Convert test reports to a merged JUnit XML`
`38`	`38`	`# NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics.`
`@@ -57,7 +57,7 @@ jobs:`
`57`	`57`	`verbose: true`
`58`	`58`	`-`
`59`	`59`	`name: Install go-ctrf-json-reporter`
`60`		`- uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`60`	`+ uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`61`	`61`	`-`
`62`	`62`	`name: Convert test reports to CTRF JSON`
`63`	`63`	`# description: \|`
Original file line number	Diff line number	Diff line change
`@@ -42,7 +42,7 @@ jobs:`
`42`	`42`	`-`
`43`	`43`	`name: Detect go mono-repo`
`44`	`44`	`id: detect-monorepo`
`45`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`45`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`46`	`46`	`-`
`47`	`47`	`name: golangci-lint [monorepo]`
`48`	`48`	`# golangci-action v9.1+ has an experimental built-in mono repo detection setup.`
`@@ -111,10 +111,10 @@ jobs:`
`111`	`111`	`-`
`112`	`112`	`name: Detect go version capabilities`
`113`	`113`	`id: detect-go-version`
`114`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-version@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`114`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-version@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`115`	`115`	`-`
`116`	`116`	`name: Install gotestsum`
`117`		`- uses: go-openapi/gh-actions/install/gotestsum@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`117`	`+ uses: go-openapi/gh-actions/install/gotestsum@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`118`	`118`	`-`
`119`	`119`	`name: Ensure TMP is created on windows runners`
`120`	`120`	`# On windows, some tests require testing.TempDir to reside on the same drive as the code.`
Original file line number	Diff line number	Diff line change
`@@ -58,7 +58,7 @@ jobs:`
`58`	`58`	`cache: true`
`59`	`59`	`-`
`60`	`60`	`name: Install gotestsum`
`61`		`- uses: go-openapi/gh-actions/install/gotestsum@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`61`	`+ uses: go-openapi/gh-actions/install/gotestsum@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`62`	`62`	`-`
`63`	`63`	`name: Ensure TMP is created on windows runners`
`64`	`64`	`# On windows, some tests require testing.TempDir to reside on the same drive as the code.`
Original file line number	Diff line number	Diff line change
`@@ -89,7 +89,7 @@ jobs:`
`89`	`89`	`name: Detect go mono-repo`
`90`	`90`	`if: ${{ inputs.is-monorepo == 'true' }}`
`91`	`91`	`id: detect-monorepo`
`92`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@23cdaeff454807ac293a6e98cff552a2ea49be63 # v1.4.7`
	`92`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@ec7fc0008806cbf69bffc34da17d9f2ddb2cd9f5 # v1.4.8`
`93`	`93`	`-`
`94`	`94`	`name: Install git-cliff`
`95`	`95`	`uses: taiki-e/install-action@385db9cc6bf65d19775b02084a4b698eaca9a4f2 # v2.68.19`