rohit/probo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bump the github-actions group with 10 updates

Browse Source 
Bumps the github-actions group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4` | `6` |
| [actions/setup-go](https://github.com/actions/setup-go) | `5` | `6` |
| [actions/setup-node](https://github.com/actions/setup-node) | `4` | `6` |
| [actions/cache](https://github.com/actions/cache) | `4` | `5` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) | `0.20.5` | `0.22.1` |
| [aquasecurity/trivy-action](https://github.com/aquasecurity/trivy-action) | `0.28.0` | `0.33.1` |
| [anchore/scan-action](https://github.com/anchore/scan-action) | `6.5.1` | `7.3.1` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact) | `4` | `6` |
| [actions/attest-sbom](https://github.com/actions/attest-sbom) | `1` | `3` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) | `1` | `3` |


Updates `actions/checkout` from 4 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](https://github.com/actions/checkout/compare/v4...v6)

Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](https://github.com/actions/setup-go/compare/v5...v6)

Updates `actions/setup-node` from 4 to 6
- [Release notes](https://github.com/actions/setup-node/releases)
- [Commits](https://github.com/actions/setup-node/compare/v4...v6)

Updates `actions/cache` from 4 to 5
- [Release notes](https://github.com/actions/cache/releases)
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)
- [Commits](https://github.com/actions/cache/compare/v4...v5)

Updates `anchore/sbom-action` from 0.20.5 to 0.22.1
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Changelog](https://github.com/anchore/sbom-action/blob/main/RELEASE.md)
- [Commits](da167eac91...deef08a0db)

Updates `aquasecurity/trivy-action` from 0.28.0 to 0.33.1
- [Release notes](https://github.com/aquasecurity/trivy-action/releases)
- [Commits](https://github.com/aquasecurity/trivy-action/compare/0.28.0...0.33.1)

Updates `anchore/scan-action` from 6.5.1 to 7.3.1
- [Release notes](https://github.com/anchore/scan-action/releases)
- [Changelog](https://github.com/anchore/scan-action/blob/main/RELEASE.md)
- [Commits](1638637db6...8d2fce0942)

Updates `actions/upload-artifact` from 4 to 6
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v4...v6)

Updates `actions/attest-sbom` from 1 to 3
- [Release notes](https://github.com/actions/attest-sbom/releases)
- [Changelog](https://github.com/actions/attest-sbom/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-sbom/compare/v1...v3)

Updates `actions/attest-build-provenance` from 1 to 3
- [Release notes](https://github.com/actions/attest-build-provenance/releases)
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)
- [Commits](https://github.com/actions/attest-build-provenance/compare/v1...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/setup-node
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/cache
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: anchore/sbom-action
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: aquasecurity/trivy-action
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-actions
- dependency-name: anchore/scan-action
  dependency-version: 7.3.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/upload-artifact
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-sbom
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
- dependency-name: actions/attest-build-provenance
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: github-actions
...

Signed-off-by: dependabot[bot] <support@github.com>
This commit is contained in:
dependabot[bot]
2026-02-01 21:14:12 +00:00
committed by GitHub
parent b574dabde2
commit b88a6ba012
4 changed files with 36 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
.github/workflows/codeql.yml vendored
View File

@@ -48,7 +48,7 @@ jobs:
# your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages # your codebase is analyzed, see https://docs.github.com/en/code-security/code-scanning/creating-an-advanced-setup-for-code-scanning/codeql-code-scanning-for-compiled-languages
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v4 uses: actions/checkout@v6
with: with:
submodules: recursive submodules: recursive

36
.github/workflows/make.yaml vendored
View File

@@ -17,11 +17,11 @@ jobs:
id-token: "write" id-token: "write"
security-events: "write" security-events: "write"
steps: steps:
- uses: "actions/checkout@v4" - uses: "actions/checkout@v6"
with: with:
fetch-depth: 0 fetch-depth: 0
submodules: recursive submodules: recursive
- uses: "actions/setup-go@v5" - uses: "actions/setup-go@v6"
with: with:
go-version: "1.25.6" go-version: "1.25.6"
cache: true cache: true
@@ -35,13 +35,13 @@ jobs:
- uses: "docker/setup-buildx-action@v3" - uses: "docker/setup-buildx-action@v3"
- uses: "sigstore/cosign-installer@v3" - uses: "sigstore/cosign-installer@v3"
- name: Cache Trivy database - name: Cache Trivy database
uses: "actions/cache@v4" uses: "actions/cache@v5"
with: with:
path: ~/.cache/trivy path: ~/.cache/trivy
key: trivy-db-${{ runner.os }}-${{ github.run_id }} key: trivy-db-${{ runner.os }}-${{ github.run_id }}
restore-keys: | restore-keys: |
trivy-db-${{ runner.os }}- trivy-db-${{ runner.os }}-
- uses: "anchore/sbom-action/download-syft@da167eac915b4e86f08b264dbdbc867b61be6f0c" # v0.20.5 - uses: "anchore/sbom-action/download-syft@deef08a0db64bfad603422135db61477b16cef56" # v0.22.1
- uses: "goreleaser/goreleaser-action@v6" - uses: "goreleaser/goreleaser-action@v6"
with: with:
distribution: "goreleaser" distribution: "goreleaser"
@@ -51,7 +51,7 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Scan Docker image with Trivy - name: Scan Docker image with Trivy
if: github.ref == 'refs/heads/main' if: github.ref == 'refs/heads/main'
uses: "aquasecurity/trivy-action@0.28.0" uses: "aquasecurity/trivy-action@0.33.1"
with: with:
image-ref: "ghcr.io/getprobo/probo:latest-amd64" image-ref: "ghcr.io/getprobo/probo:latest-amd64"
format: "sarif" format: "sarif"
@@ -63,7 +63,7 @@ jobs:
cache-dir: ~/.cache/trivy cache-dir: ~/.cache/trivy
- name: Scan Docker image with Trivy - name: Scan Docker image with Trivy
if: github.ref != 'refs/heads/main' if: github.ref != 'refs/heads/main'
uses: "aquasecurity/trivy-action@0.28.0" uses: "aquasecurity/trivy-action@0.33.1"
with: with:
image-ref: "ghcr.io/getprobo/probo:latest-amd64" image-ref: "ghcr.io/getprobo/probo:latest-amd64"
format: "table" format: "table"
@@ -77,13 +77,13 @@ jobs:
uses: github/codeql-action/upload-sarif@v4 uses: github/codeql-action/upload-sarif@v4
with: with:
sarif_file: "trivy-results.sarif" sarif_file: "trivy-results.sarif"
- uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c #v0.20.5 - uses: anchore/sbom-action@deef08a0db64bfad603422135db61477b16cef56 #v0.22.1
with: with:
path: ./ path: ./
format: cyclonedx-json format: cyclonedx-json
output-file: sbom.json output-file: sbom.json
- name: Cache grype binary - name: Cache grype binary
uses: actions/cache@v4 uses: actions/cache@v5
id: grype-cache id: grype-cache
with: with:
path: ~/.local/bin/grype path: ~/.local/bin/grype
@@ -120,7 +120,7 @@ jobs:
exit 1 exit 1
- name: Add grype to PATH - name: Add grype to PATH
run: echo "${HOME}/.local/bin" >> "$GITHUB_PATH" run: echo "${HOME}/.local/bin" >> "$GITHUB_PATH"
- uses: anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e #v6.5.1 - uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
with: with:
path: ./ path: ./
fail-build: true fail-build: true
@@ -133,10 +133,10 @@ jobs:
permissions: permissions:
contents: "read" contents: "read"
steps: steps:
- uses: "actions/checkout@v4" - uses: "actions/checkout@v6"
with: with:
submodules: recursive submodules: recursive
- uses: "actions/setup-go@v5" - uses: "actions/setup-go@v6"
with: with:
go-version: "1.25.6" go-version: "1.25.6"
cache: true cache: true
@@ -155,10 +155,10 @@ jobs:
permissions: permissions:
contents: "read" contents: "read"
steps: steps:
- uses: "actions/checkout@v4" - uses: "actions/checkout@v6"
with: with:
submodules: recursive submodules: recursive
- uses: "actions/setup-go@v5" - uses: "actions/setup-go@v6"
with: with:
go-version: "1.25.6" go-version: "1.25.6"
cache: true cache: true
@@ -173,14 +173,14 @@ jobs:
env: env:
GOTESTSUM_JUNITFILE: "junit.xml" GOTESTSUM_JUNITFILE: "junit.xml"
- name: "Upload test results" - name: "Upload test results"
uses: "actions/upload-artifact@v4" uses: "actions/upload-artifact@v6"
if: "always()" if: "always()"
with: with:
name: "junit-results" name: "junit-results"
path: "junit.xml" path: "junit.xml"
retention-days: 30 retention-days: 30
- run: "make coverage-report" - run: "make coverage-report"
- uses: "actions/upload-artifact@v4" - uses: "actions/upload-artifact@v6"
with: with:
name: "coverage-reports" name: "coverage-reports"
path: | path: |
@@ -203,10 +203,10 @@ jobs:
permissions: permissions:
contents: "read" contents: "read"
steps: steps:
- uses: "actions/checkout@v4" - uses: "actions/checkout@v6"
with: with:
submodules: recursive submodules: recursive
- uses: "actions/setup-go@v5" - uses: "actions/setup-go@v6"
with: with:
go-version: "1.25.6" go-version: "1.25.6"
cache: true cache: true
@@ -244,7 +244,7 @@ jobs:
env: env:
GOTESTSUM_JUNITFILE: "junit-e2e.xml" GOTESTSUM_JUNITFILE: "junit-e2e.xml"
- name: "Upload test results" - name: "Upload test results"
uses: "actions/upload-artifact@v4" uses: "actions/upload-artifact@v6"
if: "always()" if: "always()"
with: with:
name: "junit-e2e-results" name: "junit-e2e-results"

32
.github/workflows/release.yaml vendored
View File

@@ -20,13 +20,13 @@ jobs:
image-digest: ${{ steps.image.outputs.digest }} image-digest: ${{ steps.image.outputs.digest }}
steps: steps:
- name: Checkout - name: Checkout
uses: actions/checkout@v4 uses: actions/checkout@v6
with: with:
fetch-depth: 0 fetch-depth: 0
submodules: recursive submodules: recursive
- name: Set up Go - name: Set up Go
uses: actions/setup-go@v5 uses: actions/setup-go@v6
with: with:
go-version: "1.25.6" go-version: "1.25.6"
cache: true cache: true
@@ -71,7 +71,7 @@ jobs:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }} GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
- name: Scan Docker image with Trivy - name: Scan Docker image with Trivy
uses: aquasecurity/trivy-action@0.28.0 uses: aquasecurity/trivy-action@0.33.1
with: with:
image-ref: "ghcr.io/getprobo/probo:${{ github.ref_name }}" image-ref: "ghcr.io/getprobo/probo:${{ github.ref_name }}"
format: "sarif" format: "sarif"
@@ -88,14 +88,14 @@ jobs:
sarif_file: "trivy-results.sarif" sarif_file: "trivy-results.sarif"
- name: Generate SBOM - name: Generate SBOM
uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c #v0.20.5 uses: anchore/sbom-action@deef08a0db64bfad603422135db61477b16cef56 #v0.22.1
with: with:
path: ./ path: ./
format: cyclonedx-json format: cyclonedx-json
output-file: sbom.json output-file: sbom.json
- name: Run vulnerability scan - name: Run vulnerability scan
uses: anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e #v6.5.1 uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
with: with:
path: ./ path: ./
fail-build: true fail-build: true
@@ -114,13 +114,13 @@ jobs:
echo "hashes=$(cat checksums.txt | base64 -w0)" >> "$GITHUB_OUTPUT" echo "hashes=$(cat checksums.txt | base64 -w0)" >> "$GITHUB_OUTPUT"
- name: Attest SBOM - name: Attest SBOM
uses: actions/attest-sbom@v1 uses: actions/attest-sbom@v3
with: with:
subject-path: "dist/*.tar.gz, dist/*.zip" subject-path: "dist/*.tar.gz, dist/*.zip"
sbom-path: "sbom.json" sbom-path: "sbom.json"
- name: Attest build provenance - name: Attest build provenance
uses: actions/attest-build-provenance@v1 uses: actions/attest-build-provenance@v3
with: with:
subject-path: "dist/*.tar.gz, dist/*.zip" subject-path: "dist/*.tar.gz, dist/*.zip"
@@ -133,14 +133,14 @@ jobs:
echo "digest=$DIGEST" >> "$GITHUB_OUTPUT" echo "digest=$DIGEST" >> "$GITHUB_OUTPUT"
- name: Attest Docker image SBOM - name: Attest Docker image SBOM
uses: actions/attest-sbom@v1 uses: actions/attest-sbom@v3
with: with:
subject-name: "ghcr.io/getprobo/probo" subject-name: "ghcr.io/getprobo/probo"
subject-digest: ${{ steps.image.outputs.digest }} subject-digest: ${{ steps.image.outputs.digest }}
sbom-path: "sbom.json" sbom-path: "sbom.json"
- name: Upload SBOM as artifact - name: Upload SBOM as artifact
uses: actions/upload-artifact@v4 uses: actions/upload-artifact@v6
with: with:
name: sbom name: sbom
path: | path: |
@@ -155,12 +155,12 @@ jobs:
id-token: write id-token: write
attestations: write attestations: write
steps: steps:
- uses: actions/checkout@v4 - uses: actions/checkout@v6
with: with:
fetch-depth: 0 fetch-depth: 0
submodules: recursive submodules: recursive
- uses: actions/setup-node@v4 - uses: actions/setup-node@v6
with: with:
node-version-file: ".nvmrc" node-version-file: ".nvmrc"
cache: "npm" cache: "npm"
@@ -175,13 +175,13 @@ jobs:
VERSION="${GITHUB_REF_NAME#v}" VERSION="${GITHUB_REF_NAME#v}"
npm --workspace @probo/n8n-nodes-probo version "$VERSION" --no-git-tag-version npm --workspace @probo/n8n-nodes-probo version "$VERSION" --no-git-tag-version
- uses: anchore/sbom-action@da167eac915b4e86f08b264dbdbc867b61be6f0c #v0.20.5 - uses: anchore/sbom-action@deef08a0db64bfad603422135db61477b16cef56 #v0.22.1
with: with:
path: ./packages/n8n-node path: ./packages/n8n-node
format: cyclonedx-json format: cyclonedx-json
output-file: packages/n8n-node/sbom.json output-file: packages/n8n-node/sbom.json
- uses: anchore/scan-action@1638637db639e0ade3258b51db49a9a137574c3e #v6.5.1 - uses: anchore/scan-action@8d2fce09422cd6037e577f4130e9b925e9a37175 #v7.3.1
with: with:
path: ./packages/n8n-node path: ./packages/n8n-node
fail-build: true fail-build: true
@@ -199,16 +199,16 @@ jobs:
- run: npm --workspace @probo/n8n-nodes-probo publish --access public --dry-run - run: npm --workspace @probo/n8n-nodes-probo publish --access public --dry-run
- run: npm --workspace @probo/n8n-nodes-probo publish --access public - run: npm --workspace @probo/n8n-nodes-probo publish --access public
- uses: actions/attest-sbom@v1 - uses: actions/attest-sbom@v3
with: with:
subject-path: "packages/n8n-node/dist/**" subject-path: "packages/n8n-node/dist/**"
sbom-path: "packages/n8n-node/sbom.json" sbom-path: "packages/n8n-node/sbom.json"
- uses: actions/attest-build-provenance@v1 - uses: actions/attest-build-provenance@v3
with: with:
subject-path: "packages/n8n-node/dist/**" subject-path: "packages/n8n-node/dist/**"
- uses: actions/upload-artifact@v4 - uses: actions/upload-artifact@v6
with: with:
name: npm-sbom name: npm-sbom
path: | path: |

2
.github/workflows/secrets.yaml vendored
View File

@@ -13,7 +13,7 @@ jobs:
scan: scan:
runs-on: "ubuntu-latest" runs-on: "ubuntu-latest"
steps: steps:
- uses: "actions/checkout@v4" - uses: "actions/checkout@v6"
with: with:
fetch-depth: 0 fetch-depth: 0
submodules: recursive submodules: recursive