diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index d01b696..9d88538 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -30,12 +30,12 @@ jobs: uses: actions/checkout@v3 - name: Build the container image - uses: docker/build-push-action@v3.0.0 + uses: docker/build-push-action@v3.3.1 with: repository: golang-repo-template - name: Push to GitHub Packages - uses: docker/build-push-action@v3.0.0 + uses: docker/build-push-action@v3.3.1 if: github.event_name == 'release' || github.event_name == 'push' with: username: ${{ github.actor }} @@ -66,7 +66,7 @@ jobs: if: | (github.event_name == 'release' || github.event_name == 'push') && contains(steps.check_dockerhub_credentials.outputs.missingsecrets, 'no') - uses: docker/build-push-action@v3.0.0 + uses: docker/build-push-action@v3.3.1 with: username: ${{ secrets.DOCKER_USERNAME }} password: ${{ secrets.DOCKER_PASSWORD }} diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml index 40dcc79..2c1fe95 100644 --- a/.github/workflows/go.yml +++ b/.github/workflows/go.yml @@ -52,7 +52,7 @@ jobs: with: go-version: ${{ matrix.golang }} - name: Cache Go modules - uses: actions/cache@v3.0.2 + uses: actions/cache@v3.3.1 with: path: ~/go/pkg/mod key: ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }} @@ -72,7 +72,7 @@ jobs: steps: - uses: actions/checkout@v3 - name: golangci-lint - uses: golangci/golangci-lint-action@v3.2.0 + uses: golangci/golangci-lint-action@v3.6.0 with: version: ${{ matrix.golangci_lint }} #github-token: ${{ secrets.GITHUB_TOKEN }} @@ -109,7 +109,7 @@ jobs: uses: actions/setup-go@v3 with: go-version: ${{ matrix.golang }} - - uses: actions/cache@v3.0.2 + - uses: actions/cache@v3.3.1 with: path: ~/go/pkg/mod key: ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }} @@ -125,7 +125,7 @@ jobs: git --no-pager diff go.mod go.sum git --no-pager diff --quiet go.mod go.sum - name: Upload coverage to Codecov - uses: codecov/codecov-action@v3.1.0 + uses: codecov/codecov-action@v3.1.4 with: #token: ${{ secrets.CODECOV_TOKEN }} file: ./coverage.txt @@ -153,7 +153,7 @@ jobs: uses: actions/setup-go@v3 with: go-version: ${{ matrix.golang }} - - uses: actions/cache@v3.0.2 + - uses: actions/cache@v3.3.1 with: path: ~/go/pkg/mod key: ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }} @@ -169,7 +169,7 @@ jobs: - name: Run tests on Unix-like operating systems run: make unittest - name: Upload coverage to Codecov - uses: codecov/codecov-action@v3.1.0 + uses: codecov/codecov-action@v3.1.4 with: #token: ${{ secrets.CODECOV_TOKEN }} file: ./coverage.txt diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5cda537..17fc2af 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -37,7 +37,7 @@ jobs: - name: Cache Go modules if: steps.semantic.outputs.new-release-published == 'true' && steps.repoman.outputs.has-go-binary == 'true' - uses: actions/cache@v3.0.2 + uses: actions/cache@v3.3.1 with: path: ~/go/pkg/mod key: ${{ runner.os }}-go-${{ matrix.golang }}-v1-${{ hashFiles('**/go.sum') }} diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml index cde3a60..06d3b08 100644 --- a/.github/workflows/scorecards.yml +++ b/.github/workflows/scorecards.yml @@ -22,7 +22,7 @@ jobs: steps: - name: "Checkout code" - uses: actions/checkout@2541b1294d2704b0964813337f33b291d3f8596b # v3.0.0 + uses: actions/checkout@c85c95e3d7251135ab7dc9ce3241c5835cc595a9 # v3.5.3 with: persist-credentials: false @@ -30,7 +30,7 @@ jobs: env: SCORECARD_READ_TOKEN: ${{ secrets.SCORECARD_READ_TOKEN }} if: env.SCORECARD_READ_TOKEN != null - uses: ossf/scorecard-action@f10ec7151e838890a3fbfa27875a33f80869977b # v1.0.4 + uses: ossf/scorecard-action@ce330fde6b1a5c9c75b417e7efc510b822a35564 # v1.1.2 with: results_file: results.sarif results_format: sarif @@ -48,7 +48,7 @@ jobs: env: SCORECARD_READ_TOKEN: ${{ secrets.SCORECARD_READ_TOKEN }} if: env.SCORECARD_READ_TOKEN != null - uses: actions/upload-artifact@3cea5372237819ed00197afe530f5a7ea3e805c8 # v3.0.0 + uses: actions/upload-artifact@0b7f8abb1508181956e8e162db84b466c27e18ce # v3.1.2 with: name: SARIF file path: results.sarif diff --git a/Dockerfile b/Dockerfile index 411382e..1a08969 100644 --- a/Dockerfile +++ b/Dockerfile @@ -4,7 +4,7 @@ ARG VCS_REF ARG VERSION # build -FROM golang:1.18.2-alpine as builder +FROM golang:1.21.0-alpine as builder RUN apk add --no-cache git gcc musl-dev make ENV GO111MODULE=on WORKDIR /go/src/moul.io/golang-repo-template @@ -14,7 +14,7 @@ COPY . ./ RUN make install # minimalist runtime -FROM alpine:3.15.4 +FROM alpine:3.18.3 LABEL org.label-schema.build-date=$BUILD_DATE \ org.label-schema.name="golang-repo-template" \ org.label-schema.description="" \ diff --git a/go.mod b/go.mod index b597089..eefd9f5 100644 --- a/go.mod +++ b/go.mod @@ -3,10 +3,10 @@ module moul.io/golang-repo-template go 1.13 require ( - github.com/peterbourgon/ff/v3 v3.1.2 + github.com/peterbourgon/ff/v3 v3.4.0 github.com/tailscale/depaware v0.0.0-20210622194025-720c4b409502 - go.uber.org/goleak v1.1.12 - go.uber.org/zap v1.21.0 + go.uber.org/goleak v1.2.1 + go.uber.org/zap v1.25.0 moul.io/climan v1.0.0 moul.io/motd v1.0.0 moul.io/srand v1.6.1 diff --git a/tool/lint/package.json b/tool/lint/package.json index f334595..f318a84 100644 --- a/tool/lint/package.json +++ b/tool/lint/package.json @@ -2,8 +2,8 @@ "dependencies": { "alex": "10.0.0", "markdown-spellcheck": "1.3.1", - "markdownlint-cli": "0.31.1", + "markdownlint-cli": "0.35.0", "remark-cli": "10.0.1", - "remark-lint": "9.1.1" + "remark-lint": "9.1.2" } }