Bump the actions group across 1 directory with 3 updates - #10
Bump the actions group across 1 directory with 3 updates#10dependabot[bot] wants to merge 1 commit into
Conversation
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
| timeout-minutes: 5 | ||
| steps: | ||
| - uses: actions/setup-go@v3 | ||
| - uses: actions/setup-go@v6 |
There was a problem hiding this comment.
Idle timer Go version mismatch
High Severity
Bumping actions/setup-go to v6 while keeping go-version: '1.21.5' breaks the idle-timer build. setup-go@v6 sets GOTOOLCHAIN=local, so Go can no longer auto-download the 1.25.0 toolchain required by go.mod. The prior v3 behavior relied on that auto-download, so this job will now fail at ./linux-build.sh.
Reviewed by Cursor Bugbot for commit 52c45a6. Configure here.
dependabot
Bot
changed the title
52c45a6 to
9291432
Compare
5c5fc26 to
eef61f1
Compare
Bumps the actions group with 3 updates in the / directory: [actions/checkout](https://github.com/actions/checkout), [actions/setup-go](https://github.com/actions/setup-go) and [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action). Updates `actions/checkout` from 3.6.0 to 7.0.1 - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v3.6.0...3d3c42e) Updates `actions/setup-go` from 3.6.1 to 7.0.0 - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v3.6.1...b7ad1da) Updates `golangci/golangci-lint-action` from 8.0.0 to 9.3.0 - [Release notes](https://github.com/golangci/golangci-lint-action/releases) - [Commits](golangci/golangci-lint-action@4afd733...ba0d7d2) --- updated-dependencies: - dependency-name: actions/checkout dependency-version: '7' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: actions/setup-go dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions - dependency-name: golangci/golangci-lint-action dependency-version: '9' dependency-type: direct:production update-type: version-update:semver-major dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
eef61f1 to
7905cec
Compare
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
There are 2 total unresolved issues (including 1 from previous review).
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 7905cec. Configure here.
| with: | ||
| go-version: '1.21.5' | ||
| - uses: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744 # v3 | ||
| - uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v3 |
There was a problem hiding this comment.
Setup-go runs before checkout
Low Severity
Bumping actions/setup-go from v3 to v7 enables caching by default, but this job still runs setup before actions/checkout. Without go.mod present, cache restore fails each run and emits warnings.
Reviewed by Cursor Bugbot for commit 7905cec. Configure here.
Bumps the actions group with 3 updates in the / directory: actions/checkout, actions/setup-go and golangci/golangci-lint-action.
Updates
actions/checkoutfrom 3.6.0 to 7.0.1Release notes
Sourced from actions/checkout's releases.
... (truncated)
Changelog
Sourced from actions/checkout's changelog.
... (truncated)
Commits
3d3c42eprep v7.0.1 release (#2531)2880268escape values passed to --unset (#2530)12cd223trim only ascii whitespace for branch (#2521)62661c4skip running unsafe pr check if input is default (#2518)e8d4307Bump the minor-actions-dependencies group with 2 updates (#2499)631c942eslint 9 (#2474)4f1f4aeBump actions/upload-artifact from 4 to 7 (#2476)ba09753Bump actions/checkout from 6 to 7 (#2488)b9e0990Bump docker/login-action from 3.3.0 to 4.2.0 (#2479)e8cb398Bump docker/build-push-action from 6.5.0 to 7.2.0 (#2478)Updates
actions/setup-gofrom 3.6.1 to 7.0.0Release notes
Sourced from actions/setup-go's releases.
... (truncated)
Commits
b7ad1dachore(deps): bump@actions/cacheto 6.2.0 (#771)0778a10Migrate to ESM and upgrade dependencies (#763)924ae3achore: bump version to 6.5.0 in package.json and package-lock.json (#762)e91cc3bBump@actions/cacheto 5.1.0, log cache write denied (#758)4a2405echore: update@types/nodeand@typescript-eslintdependencies to latest versi...78961f6chore: update@actionsdependencies and refresh license cache (#744)4a36011docs: fix Microsoft build of Go link (#734)8f19afcfeat: add go-download-base-url input for custom Go distributions (#721)27fdb26Bump minimatch from 3.1.2 to 3.1.5 (#727)def8c39Rearrange README.md, add advanced-usage.md (#724)Updates
golangci/golangci-lint-actionfrom 8.0.0 to 9.3.0Release notes
Sourced from golangci/golangci-lint-action's releases.
... (truncated)
Commits
ba0d7d2chore: prepare release v9.3.0efd0857feat: add no-run-logs-group as experimental option (#1403)ed485debuild(deps): bump undici from 6.24.0 to 6.27.08872e8dbuild(deps-dev): bump js-yaml from 4.1.1 to 4.2.0 (#1400)b163415build(deps): bump tmp from 0.2.6 to 0.2.7 (#1399)e52a9f8build(deps): bump github/codeql-action from 4.35.5 to 4.36.0 in the github-ac...8182aa3build(deps): bump tmp from 0.2.5 to 0.2.6 (#1397)5403a41build(deps): bump github/codeql-action from 4.35.4 to 4.35.5 in the github-ac...82606bfchore: prepare release v9.2.197c8387chore: improve workflows (#1394)Need help on this PR? Tag
@codesmith-botwith what you need. Autofix is disabled.