From b88a6ba012e9f3ada54c749afcd21a1bd7325e01 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Sun, 1 Feb 2026 21:14:12 +0000 Subject: [PATCH] Bump the github-actions group with 10 updates Bumps the github-actions group with 10 updates: | Package | From | To | | --- | --- | --- | | [actions/checkout](https://github.com/actions/checkout) | `4` | `6` | | [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` | | [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` | | [actions/cache](https://github.com/actions/cache) | `4` | `5` | | [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.5` | `0.22.1` | | [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.28.0` | `0.33.1` | | [anchore/scan-action](https://github.com/anchore/scan-action) | `6.5.1` | `7.3.1` | | [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `6` | | [actions/attest-sbom](https://github.com/actions/attest-sbom) | `1` | `3` | | [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `1` | `3` | Updates `actions/checkout` from 4 to 6 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](https://github.com/actions/checkout/compare/v4...v6) Updates `actions/setup-go` from 5 to 6 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](https://github.com/actions/setup-go/compare/v5...v6) Updates `actions/setup-node` from 4 to 6 - [Release notes](https://github.com/actions/setup-node/releases) - [Commits](https://github.com/actions/setup-node/compare/v4...v6) Updates `actions/cache` from 4 to 5 - [Release notes](https://github.com/actions/cache/releases) - [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md) - [Commits](https://github.com/actions/cache/compare/v4...v5) Updates `anchore/sbom-action` from 0.20.5 to 0.22.1 - [Release notes](https://github.com/anchore/sbom-action/releases) - [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/sbom-action/compare/da167eac915b4e86f08b264dbdbc867b61be6f0c...deef08a0db64bfad603422135db61477b16cef56) Updates `aquasecurity/trivy-action` from 0.28.0 to 0.33.1 - [Release notes](https://github.com/aquasecurity/trivy-action/releases) - [Commits](https://github.com/aquasecurity/trivy-action/compare/0.28.0...0.33.1) Updates `anchore/scan-action` from 6.5.1 to 7.3.1 - [Release notes](https://github.com/anchore/scan-action/releases) - [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md) - [Commits](https://github.com/anchore/scan-action/compare/1638637db639e0ade3258b51db49a9a137574c3e...8d2fce09422cd6037e577f4130e9b925e9a37175) Updates `actions/upload-artifact` from 4 to 6 - [Release notes](https://github.com/actions/upload-artifact/releases) - [Commits](https://github.com/actions/upload-artifact/compare/v4...v6) Updates `actions/attest-sbom` from 1 to 3 - [Release notes](https://github.com/actions/attest-sbom/releases) - [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-sbom/compare/v1...v3) Updates `actions/attest-build-provenance` from 1 to 3 - [Release notes](https://github.com/actions/attest-build-provenance/releases) - [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md) - [Commits](https://github.com/actions/attest-build-provenance/compare/v1...v3) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-go dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/setup-node dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/cache dependency-version: '5' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: anchore/sbom-action dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: aquasecurity/trivy-action dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-actions - dependency-name: anchore/scan-action dependency-version: 7.3.1 dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/upload-artifact dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/attest-sbom dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions - dependency-name: actions/attest-build-provenance dependency-version: '3' dependency-type: direct:production update-type: version-update:semver-major dependency-group: github-actions ... Signed-off-by: dependabot[bot] --- .github/workflows/codeql.yml | 2 +- .github/workflows/make.yaml | 36 +++++++++++++++++----------------- .github/workflows/release.yaml | 32 +++++++++++++++--------------- .github/workflows/secrets.yaml | 2 +- 4 files changed, 36 insertions(+), 36 deletions(-) diff --git a/.github/workflows/codeql.yml b/.github/workflows/codeql.yml index 6c29c1166..d468fdaa7 100644 --- a/.github/workflows/codeql.yml +++ b/.github/workflows/codeql.yml @@ -48,7 +48,7 @@ jobs: # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages steps: - name: Checkout repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: submodules: recursive diff --git a/.github/workflows/make.yaml b/.github/workflows/make.yaml index 5d6f15f8b..9c95b457e 100644 --- a/.github/workflows/make.yaml +++ b/.github/workflows/make.yaml @@ -17,11 +17,11 @@ jobs: id-token: "write" security-events: "write" steps: - - uses: "actions/checkout@v4" + - uses: "actions/checkout@v6" with: fetch-depth: 0 submodules: recursive - - uses: "actions/setup-go@v5" + - uses: "actions/setup-go@v6" with: go-version: "1.25.6" cache: true @@ -35,13 +35,13 @@ jobs: - uses: "docker/setup-buildx-action@v3" - uses: "sigstore/cosign-installer@v3" - name: Cache Trivy database - uses: "actions/cache@v4" + uses: "actions/cache@v5" with: path: ~/.cache/trivy key: trivy-db-${{ runner.os }}-${{ github.run_id }} restore-keys: | trivy-db-${{ runner.os }}- - - uses: "anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c" # v0.20.5 + - uses: "anchore/sbom-action/download-syft@deef08a0db64bfad603422135db61477b16cef56" # v0.22.1 - uses: "goreleaser/goreleaser-action@v6" with: distribution: "goreleaser" @@ -51,7 +51,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Scan Docker image with Trivy if: github.ref == 'refs/heads/main' - uses: "aquasecurity/trivy-action@0.28.0" + uses: "aquasecurity/trivy-action@0.33.1" with: image-ref: "ghcr.io/getprobo/probo:latest-amd64" format: "sarif" @@ -63,7 +63,7 @@ jobs: cache-dir: ~/.cache/trivy - name: Scan Docker image with Trivy if: github.ref != 'refs/heads/main' - uses: "aquasecurity/trivy-action@0.28.0" + uses: "aquasecurity/trivy-action@0.33.1" with: image-ref: "ghcr.io/getprobo/probo:latest-amd64" format: "table" @@ -77,13 +77,13 @@ jobs: uses: github/codeql-action/upload-sarif@v4 with: sarif_file: "trivy-results.sarif" - - uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c #v0.20.5 + - uses: anchore/sbom-action@deef08a0db64bfad603422135db61477b16cef56 #v0.22.1 with: path: ./ format: cyclonedx-json output-file: sbom.json - name: Cache grype binary - uses: actions/cache@v4 + uses: actions/cache@v5 id: grype-cache with: path: ~/.local/bin/grype @@ -120,7 +120,7 @@ jobs: exit 1 - name: Add grype to PATH run: echo "${HOME}/.local/bin" >> "$GITHUB_PATH" - - uses: anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e #v6.5.1 + - uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1 with: path: ./ fail-build: true @@ -133,10 +133,10 @@ jobs: permissions: contents: "read" steps: - - uses: "actions/checkout@v4" + - uses: "actions/checkout@v6" with: submodules: recursive - - uses: "actions/setup-go@v5" + - uses: "actions/setup-go@v6" with: go-version: "1.25.6" cache: true @@ -155,10 +155,10 @@ jobs: permissions: contents: "read" steps: - - uses: "actions/checkout@v4" + - uses: "actions/checkout@v6" with: submodules: recursive - - uses: "actions/setup-go@v5" + - uses: "actions/setup-go@v6" with: go-version: "1.25.6" cache: true @@ -173,14 +173,14 @@ jobs: env: GOTESTSUM_JUNITFILE: "junit.xml" - name: "Upload test results" - uses: "actions/upload-artifact@v4" + uses: "actions/upload-artifact@v6" if: "always()" with: name: "junit-results" path: "junit.xml" retention-days: 30 - run: "make coverage-report" - - uses: "actions/upload-artifact@v4" + - uses: "actions/upload-artifact@v6" with: name: "coverage-reports" path: | @@ -203,10 +203,10 @@ jobs: permissions: contents: "read" steps: - - uses: "actions/checkout@v4" + - uses: "actions/checkout@v6" with: submodules: recursive - - uses: "actions/setup-go@v5" + - uses: "actions/setup-go@v6" with: go-version: "1.25.6" cache: true @@ -244,7 +244,7 @@ jobs: env: GOTESTSUM_JUNITFILE: "junit-e2e.xml" - name: "Upload test results" - uses: "actions/upload-artifact@v4" + uses: "actions/upload-artifact@v6" if: "always()" with: name: "junit-e2e-results" diff --git a/.github/workflows/release.yaml b/.github/workflows/release.yaml index f3c032637..fe382a387 100644 --- a/.github/workflows/release.yaml +++ b/.github/workflows/release.yaml @@ -20,13 +20,13 @@ jobs: image-digest: ${{ steps.image.outputs.digest }} steps: - name: Checkout - uses: actions/checkout@v4 + uses: actions/checkout@v6 with: fetch-depth: 0 submodules: recursive - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v6 with: go-version: "1.25.6" cache: true @@ -71,7 +71,7 @@ jobs: GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} - name: Scan Docker image with Trivy - uses: aquasecurity/trivy-action@0.28.0 + uses: aquasecurity/trivy-action@0.33.1 with: image-ref: "ghcr.io/getprobo/probo:${{ github.ref_name }}" format: "sarif" @@ -88,14 +88,14 @@ jobs: sarif_file: "trivy-results.sarif" - name: Generate SBOM - uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c #v0.20.5 + uses: anchore/sbom-action@deef08a0db64bfad603422135db61477b16cef56 #v0.22.1 with: path: ./ format: cyclonedx-json output-file: sbom.json - name: Run vulnerability scan - uses: anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e #v6.5.1 + uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1 with: path: ./ fail-build: true @@ -114,13 +114,13 @@ jobs: echo "hashes=$(cat checksums.txt | base64 -w0)" >> "$GITHUB_OUTPUT" - name: Attest SBOM - uses: actions/attest-sbom@v1 + uses: actions/attest-sbom@v3 with: subject-path: "dist/*.tar.gz, dist/*.zip" sbom-path: "sbom.json" - name: Attest build provenance - uses: actions/attest-build-provenance@v1 + uses: actions/attest-build-provenance@v3 with: subject-path: "dist/*.tar.gz, dist/*.zip" @@ -133,14 +133,14 @@ jobs: echo "digest=$DIGEST" >> "$GITHUB_OUTPUT" - name: Attest Docker image SBOM - uses: actions/attest-sbom@v1 + uses: actions/attest-sbom@v3 with: subject-name: "ghcr.io/getprobo/probo" subject-digest: ${{ steps.image.outputs.digest }} sbom-path: "sbom.json" - name: Upload SBOM as artifact - uses: actions/upload-artifact@v4 + uses: actions/upload-artifact@v6 with: name: sbom path: | @@ -155,12 +155,12 @@ jobs: id-token: write attestations: write steps: - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 with: fetch-depth: 0 submodules: recursive - - uses: actions/setup-node@v4 + - uses: actions/setup-node@v6 with: node-version-file: ".nvmrc" cache: "npm" @@ -175,13 +175,13 @@ jobs: VERSION="${GITHUB_REF_NAME#v}" npm --workspace @probo/n8n-nodes-probo version "$VERSION" --no-git-tag-version - - uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c #v0.20.5 + - uses: anchore/sbom-action@deef08a0db64bfad603422135db61477b16cef56 #v0.22.1 with: path: ./packages/n8n-node format: cyclonedx-json output-file: packages/n8n-node/sbom.json - - uses: anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e #v6.5.1 + - uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1 with: path: ./packages/n8n-node fail-build: true @@ -199,16 +199,16 @@ jobs: - run: npm --workspace @probo/n8n-nodes-probo publish --access public --dry-run - run: npm --workspace @probo/n8n-nodes-probo publish --access public - - uses: actions/attest-sbom@v1 + - uses: actions/attest-sbom@v3 with: subject-path: "packages/n8n-node/dist/**" sbom-path: "packages/n8n-node/sbom.json" - - uses: actions/attest-build-provenance@v1 + - uses: actions/attest-build-provenance@v3 with: subject-path: "packages/n8n-node/dist/**" - - uses: actions/upload-artifact@v4 + - uses: actions/upload-artifact@v6 with: name: npm-sbom path: | diff --git a/.github/workflows/secrets.yaml b/.github/workflows/secrets.yaml index dd5ad2d17..53681dcdd 100644 --- a/.github/workflows/secrets.yaml +++ b/.github/workflows/secrets.yaml @@ -13,7 +13,7 @@ jobs: scan: runs-on: "ubuntu-latest" steps: - - uses: "actions/checkout@v4" + - uses: "actions/checkout@v6" with: fetch-depth: 0 submodules: recursive