From 131e2413fd297cb4eabc75cfb0b121a9d627ac8a Mon Sep 17 00:00:00 2001 From: Bez625 Date: Thu, 22 Oct 2026 14:05:45 +0100 Subject: [PATCH 1/2] chore(ci): bump actions off EOL Node runtimes Node 12/16/20 are EOL and will not receive the fixes from the October 2026 Node.js security releases (22.23.4 / 24.22.1 / 26.12.1), including CVE-2026-111497 (out-of-bounds write in the Brotli decoder, RCE). Bumps pinned actions to releases that declare `using: node24`. Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/docker.yml | 8 ++++---- .github/workflows/golangci-lint.yml | 6 +++--- .github/workflows/release.yml | 12 ++++++------ .github/workflows/test.yml | 4 ++-- 4 files changed, 15 insertions(+), 15 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index d36bf58..e207b10 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out repository - uses: actions/checkout@v4 + uses: actions/checkout@v6 # This step extracts the version number from the tag # e.g., if the tag is 'v1.2.3', this will output '1.2.3' @@ -23,13 +23,13 @@ jobs: echo "version=$(echo ${{ github.ref_name }} | sed -e 's/^v//')" >> $GITHUB_OUTPUT - name: Set up QEMU - uses: docker/setup-qemu-action@v3 + uses: docker/setup-qemu-action@v4 - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v3 + uses: docker/setup-buildx-action@v4 - name: Login to Docker Hub - uses: docker/login-action@v3 + uses: docker/login-action@v4 with: username: ${{ secrets.DOCKERHUB_USERNAME }} password: ${{ secrets.DOCKERHUB_TOKEN }} diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index db908ec..7796834 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -16,12 +16,12 @@ jobs: name: 'lint' runs-on: 'ubuntu-24.04' steps: - - uses: 'actions/setup-go@v5' + - uses: 'actions/setup-go@v7' with: cache: false go-version: '^1.22' - - uses: 'actions/checkout@v4' - - uses: 'golangci/golangci-lint-action@v7' + - uses: 'actions/checkout@v6' + - uses: 'golangci/golangci-lint-action@v9' with: version: 'v2.12.2' args: '--timeout=60m' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 6bc8cb1..5ade0e2 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -45,13 +45,13 @@ jobs: needs: [create_release, env_vars] steps: - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: cache: false go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -121,13 +121,13 @@ jobs: needs: [create_release, env_vars] steps: - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: cache: false go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -167,13 +167,13 @@ jobs: needs: [create_release, env_vars] steps: - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: cache: false go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Select correct tag run: git checkout ${{ github.ref_name }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index e5881bc..014815e 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -10,9 +10,9 @@ jobs: test: runs-on: ubuntu-latest steps: - - uses: actions/setup-go@v5 + - uses: actions/setup-go@v7 with: cache: false go-version: '^1.22' - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - uses: n8maninger/action-golang-test@v2 From 96cb79650af96fbc49343e4b1498d5a7f8cc54db Mon Sep 17 00:00:00 2001 From: Chris Berry Date: Mon, 26 Oct 2026 11:07:50 +0000 Subject: [PATCH 2/2] chore(ci): use actions/checkout@v7 Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/docker.yml | 2 +- .github/workflows/golangci-lint.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/test.yml | 2 +- 4 files changed, 6 insertions(+), 6 deletions(-) diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml index e207b10..c7f6b4c 100644 --- a/.github/workflows/docker.yml +++ b/.github/workflows/docker.yml @@ -13,7 +13,7 @@ jobs: runs-on: ubuntu-latest steps: - name: Check out repository - uses: actions/checkout@v6 + uses: actions/checkout@v7 # This step extracts the version number from the tag # e.g., if the tag is 'v1.2.3', this will output '1.2.3' diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index 7796834..ceefaa4 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -20,7 +20,7 @@ jobs: with: cache: false go-version: '^1.22' - - uses: 'actions/checkout@v6' + - uses: 'actions/checkout@v7' - uses: 'golangci/golangci-lint-action@v9' with: version: 'v2.12.2' diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5ade0e2..6f04893 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -51,7 +51,7 @@ jobs: go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -127,7 +127,7 @@ jobs: go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -173,7 +173,7 @@ jobs: go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Select correct tag run: git checkout ${{ github.ref_name }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 014815e..fe82417 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -14,5 +14,5 @@ jobs: with: cache: false go-version: '^1.22' - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: n8maninger/action-golang-test@v2