ipdxco · galargh · Feb 22, 2026 · Feb 22, 2026 · Feb 22, 2026 · Feb 22, 2026
diff --git a/.github/workflows/add-label-by-query.yml b/.github/workflows/add-label-by-query.yml
@@ -26,7 +26,7 @@ jobs:
           QUERY: ${{ github.event.inputs.query }}
           LABEL: ${{ github.event.inputs.label }}
           DRY_RUN: ${{ github.event.inputs.dry-run }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           result-encoding: string
           script: |

diff --git a/.github/workflows/create-prs.yml b/.github/workflows/create-prs.yml
@@ -22,7 +22,7 @@ jobs:
         env:
           BRANCH: ${{ github.event.inputs.branch }}
           DRY_RUN: ${{ github.event.inputs.dry-run }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.UCI_GITHUB_TOKEN }}
           retries: 0

diff --git a/.github/workflows/delete-branches.yml b/.github/workflows/delete-branches.yml
@@ -22,7 +22,7 @@ jobs:
         env:
           BRANCH: ${{ github.event.inputs.branch }}
           DRY_RUN: ${{ github.event.inputs.dry-run }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.UCI_GITHUB_TOKEN }}
           retries: 0

diff --git a/.github/workflows/dispatch-run.yml b/.github/workflows/dispatch-run.yml
@@ -7,7 +7,7 @@ on:
         description: "Workflow to dispatch (e.g. .github/workflows/update-go.yml)"
         required: true
       inputs:
-        description: 'Workflow inputs (e.g {"version": "1.25", "dry-run": "true"})'
+        description: 'Workflow inputs (e.g {"version": "1.26", "dry-run": "true"})'
         required: false
         default: '{}'
       filter:

diff --git a/.github/workflows/dispatch.yml b/.github/workflows/dispatch.yml
@@ -27,7 +27,7 @@ jobs:
       batches: ${{ steps.matrix.outputs.result }}
     steps:
       - id: matrix
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         env:
           FILTER: ${{ inputs.filter }}
         with:

diff --git a/.github/workflows/go-check.yml b/.github/workflows/go-check.yml
@@ -77,7 +77,7 @@ jobs:
           fi
       - name: Check out the latest stable version of Go
         id: stable
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: stable
           cache: false
@@ -90,7 +90,7 @@ jobs:
       - name: Set up the Go version read from the go.mod file
         id: go
         if: (inputs.go-version || fromJSON(steps.go-mod.outputs.json).Go) != steps.stable.outputs.go-version || inputs.go-cache != 'false'
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: ${{ inputs.go-version || fromJSON(steps.go-mod.outputs.json).Go }}
           cache: ${{ inputs.go-cache }}
@@ -100,9 +100,10 @@ jobs:
       - name: Install staticcheck
         env:
           # TODO: Update the staticcheck versions to the latest we should be able to use with each Go version.
-          # STATICCHECK_VERSIONS: | # 2025.1.1, 2025.1.1, 2025.1.1, 2024.1.1, 2023.1.7, 2023.1.7, 2023.1.7, 2022.1.3, 2022.1.3, 2021.1.2, 2021.1.2, 2021.1.2, 2020.1.6
+          # STATICCHECK_VERSIONS: | # 2026.1, 2026.1, 2025.1.1, 2025.1.1, 2024.1.1, 2023.1.7, 2023.1.7, 2023.1.7, 2022.1.3, 2022.1.3, 2021.1.2, 2021.1.2, 2021.1.2, 2020.1.6
           #   {
-          #     "1.25": "b8ec13ce4d00445d75da053c47498e6f9ec5d7d6",
+          #     "1.26": "ff63afafc529279f454e02f1d060210bd4263951",
+          #     "1.25": "ff63afafc529279f454e02f1d060210bd4263951",
           #     "1.24": "b8ec13ce4d00445d75da053c47498e6f9ec5d7d6",
           #     "1.23": "b8ec13ce4d00445d75da053c47498e6f9ec5d7d6",
           #     "1.22": "56172d41b117cc2c2f99f65fe0a790c8d7d7ea66",
@@ -118,6 +119,7 @@ jobs:
           #   }
           STATICCHECK_VERSIONS: |
             {
+              "1.26": "ff63afafc529279f454e02f1d060210bd4263951",
               "1.25": "b8ec13ce4d00445d75da053c47498e6f9ec5d7d6",
               "1.24": "5af2e5fc3b08ba46027eb48ebddeba34dc0bd02c",
               "1.23": "56172d41b117cc2c2f99f65fe0a790c8d7d7ea66",
@@ -141,8 +143,9 @@ jobs:
       - name: Install golangci-lint
         if: hashFiles('.golangci.yml', '.golangci.toml', '.golangci.json', '.golangci.yaml') != ''
         env:
-          GOLANGCI_LINT_VERSIONS: | # v2.4.0, v2.1.6, v2.1.6, v1.63.4, v1.59.1, v1.55.2, v1.53.3, v1.47.3, v1.44.2, v1.44.2, v1.42.1, v1.39.0, v1.37.1
+          GOLANGCI_LINT_VERSIONS: | # v2.10.1, v2.4.0, v2.1.6, v2.1.6, v1.63.4, v1.59.1, v1.55.2, v1.53.3, v1.47.3, v1.44.2, v1.44.2, v1.42.1, v1.39.0, v1.37.1
             {
+              "1.26": "5d1e709b7be35cb2025444e19de266b056b7b7ee",
               "1.25": "43d03392d7dc3746fa776dbddd66dfcccff70651",
               "1.24": "eabc2638a66daf5bb6c6fb052a32fa3ef7b6600d",
               "1.23": "eabc2638a66daf5bb6c6fb052a32fa3ef7b6600d",

diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
@@ -96,7 +96,7 @@ jobs:
           token: ${{ steps.checkout-app.outputs.token || secrets.CHECKOUT_TOKEN || github.token }}
       - name: Check out the latest stable version of Go
         id: stable
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         with:
           go-version: stable
           cache: false
@@ -145,7 +145,7 @@ jobs:
           echo "GO386FLAGS=-v $GO386FLAGS" >> $GITHUB_ENV
           echo "GORACEFLAGS=-v $GORACEFLAGS" >> $GITHUB_ENV
       - name: Set up the Go version read from the go.mod file
-        uses: actions/setup-go@v5
+        uses: actions/setup-go@v6
         if: steps.go.outputs.version != steps.stable.outputs.go-version || inputs.go-cache != 'false'
         with:
           go-version: ${{ steps.go.outputs.version }}
@@ -196,7 +196,7 @@ jobs:
         run: echo "files=$(find . -type f -name 'module-coverage.txt' | tr -s '\n' ',' | sed 's/,$//')" >> $GITHUB_OUTPUT
       - name: Upload coverage to Codecov
         if: steps.secrets.outputs.CODECOV_TOKEN == 'true'
-        uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+        uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         env:
           OS: ${{ matrix.os }}
           GO: ${{ steps.go.outputs.version }}

diff --git a/.github/workflows/js-test-and-release.yml b/.github/workflows/js-test-and-release.yml
@@ -36,8 +36,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
 
@@ -46,8 +47,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present lint
@@ -65,12 +67,13 @@ jobs:
       fail-fast: true
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: ${{ matrix.node }}
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:node
-      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: node
           files: .coverage/*,packages/*/.coverage/*
@@ -83,12 +86,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:chrome
-      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: chrome
           files: .coverage/*,packages/*/.coverage/*
@@ -100,12 +104,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:chrome-webworker
-      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: chrome-webworker
           files: .coverage/*,packages/*/.coverage/*
@@ -117,12 +122,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:firefox
-      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: firefox
           files: .coverage/*,packages/*/.coverage/*
@@ -134,12 +140,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npm run --if-present test:firefox-webworker
-      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: firefox-webworker
           files: .coverage/*,packages/*/.coverage/*
@@ -156,13 +163,14 @@ jobs:
       fail-fast: true
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npx playwright install-deps
       - run: npm run --if-present test:webkit
-      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: webkit
           files: .coverage/*,packages/*/.coverage/*
@@ -180,13 +188,14 @@ jobs:
       fail-fast: true
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npx playwright install-deps
       - run: npm run --if-present test:webkit-webworker
-      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: webkit-webworker
           files: .coverage/*,packages/*/.coverage/*
@@ -199,12 +208,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npx xvfb-maybe npm run --if-present test:electron-main
-      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: electron-main
           files: .coverage/*,packages/*/.coverage/*
@@ -216,12 +226,13 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v5
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - run: npx xvfb-maybe npm run --if-present test:electron-renderer
-      - uses: codecov/codecov-action@fdcc8476540edceab3de004e990f80d881c6cc00 # v5.5.0
+      - uses: codecov/codecov-action@671740ac38dd9b0130fbe1cec585b89eea48d3de # v5.5.2
         with:
           flags: electron-renderer
           files: .coverage/*,packages/*/.coverage/*
@@ -240,7 +251,7 @@ jobs:
         env:
           BRANCHES: ${{ inputs.branches }}
           REF: ${{ github.ref }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const branches = JSON.parse(process.env.BRANCHES);
@@ -262,8 +273,9 @@ jobs:
         with:
           fetch-depth: 0
           persist-credentials: false
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@v6
         with:
+          package-manager-cache: false
           node-version: lts/*
       - uses: ipfs/aegir/actions/cache-node-modules@main
       - uses: ipfs/aegir/actions/docker-login@main

diff --git a/.github/workflows/merge-prs.yml b/.github/workflows/merge-prs.yml
@@ -23,7 +23,7 @@ jobs:
           QUERY: is:pr author:web3-bot state:open archived:false
           BRANCH: ${{ github.event.inputs.branch }}
           DRY_RUN: ${{ github.event.inputs.dry-run }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           github-token: ${{ secrets.UCI_GITHUB_TOKEN }}
           retries: 0

diff --git a/.github/workflows/process.yml b/.github/workflows/process.yml
@@ -79,7 +79,7 @@ jobs:
         fetch-depth: 0
     - id: github-cache
       name: Get ${{ matrix.repository }} GitHub info from cache
-      uses: actions/cache/restore@v4
+      uses: actions/cache/restore@v5
       with:
         path: ${{ matrix.repository }}.info
         key: ${{ matrix.repository }}
@@ -115,7 +115,7 @@ jobs:
         echo "$eof" >> $GITHUB_OUTPUT
     - if: steps.github-cache.outputs.cache-hit != 'true'
       name: Save ${{ matrix.repository }} GitHub info to cache
-      uses: actions/cache/save@v4
+      uses: actions/cache/save@v5
       with:
         path: ${{ matrix.repository }}.info
         key: ${{ matrix.repository }}

diff --git a/.github/workflows/release-check.yml b/.github/workflows/release-check.yml
@@ -36,7 +36,7 @@ jobs:
         name: Retrieve PR information
         env:
           PULL_REQUEST: ${{ toJSON(github.event.pull_request) }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             let pr = JSON.parse(process.env.PULL_REQUEST);
@@ -61,7 +61,7 @@ jobs:
       - uses: actions/checkout@v5
       - id: go-mod
         uses: ipdxco/unified-github-workflows/.github/actions/read-go-mod@main
-      - uses: actions/setup-go@v5
+      - uses: actions/setup-go@v6
         with:
           go-version: ${{ fromJSON(steps.go-mod.outputs.json).Go || 'stable' }}
           cache: false
@@ -107,7 +107,7 @@ jobs:
         env:
           BRANCHES: ${{ inputs.branches }}
           BASE_REF: ${{ fromJSON(steps.pr.outputs.json).base.ref }}
-        uses: actions/github-script@v7
+        uses: actions/github-script@v8
         with:
           script: |
             const branches = JSON.parse(process.env.BRANCHES);
@@ -137,7 +137,7 @@ jobs:
           fi
       - name: Install semver (node command line tool)
         if: steps.tag.outputs.needed == 'true'
-        run: npm install -g "https://github.com/npm/node-semver#dc0fe202faaf19a545ce5eeab3480be84180a082" # v7.3.8
+        run: npm install -g "https://github.com/npm/node-semver#5993c2e42bdf17c5f03e6360da51bc707fcee460" # v7.7.4
       - name: Check version
         if: steps.tag.outputs.needed == 'true'
         env:
@@ -209,7 +209,7 @@ jobs:
           echo "output<<$EOF" >> $GITHUB_OUTPUT
           if [[ "$LANGUAGE" == "Go" ]]; then
             go mod download
-            go install golang.org/x/exp/cmd/gorelease@eff6e970281f06e676cb2d92dab7eebf70f6b968 # https://cs.opensource.google/go/x/exp/+/eff6e970281f06e676cb2d92dab7eebf70f6b968
+            go install golang.org/x/exp/cmd/gorelease@2735e65f0518bac4f30f0042ea19b4b5b14dcbf7 # https://cs.opensource.google/go/x/exp/+/2735e65f0518bac4f30f0042ea19b4b5b14dcbf7
             go install github.com/smola/gocompat/cmd/gocompat@8498b97a44792a3a6063c47014726baa63e2e669 # v0.3.0
             echo "\`gorelease\` says:" >> $GITHUB_OUTPUT
             echo "\`\`\`" >> $GITHUB_OUTPUT
@@ -336,7 +336,7 @@ jobs:
           sed 's/[":<>|*?\r\n\\\/]/_/g' <<< "$SOURCE" | xargs -I {} -0 echo "name={}" | tee -a $GITHUB_OUTPUT
       - name: Upload release.json
         if: steps.release.outputs.id != ''
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: ${{ steps.json.outputs.name }}
           path: release.json
@@ -346,7 +346,7 @@ jobs:
     outputs:
       json: ${{ toJSON(fromJSON(steps.aggregate.outputs.json)) }}
     steps:
-      - uses: actions/download-artifact@v5
+      - uses: actions/download-artifact@v7
       - id: aggregate
         run: |
           shopt -s globstar