Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update actions/setup-go action to v5.0.1 #179

Merged
merged 1 commit into from
May 6, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented May 6, 2024

Mend Renovate

This PR contains the following updates:

Package Type Update Change
actions/setup-go action patch v5.0.0 -> v5.0.1

Release Notes

actions/setup-go (actions/setup-go)

v5.0.1

Compare Source

What's Changed

New Contributors

Full Changelog: actions/setup-go@v5.0.0...v5.0.1


Configuration

📅 Schedule: Branch creation - "* 0-4 * * 3" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

Copy link

github-actions bot commented May 6, 2024

[puLL-Merge] - actions/setup-go@v5.0.0..v5.0.1

Description

This PR upgrades the setup-go action to V5, which changes the Node.js runtime from node16 to node20. It also updates several dependencies to their latest versions.

Changes

Changes

  • README.md:
    • Adds documentation for the V5 release, noting the upgraded Node.js runtime
    • Updates examples to use actions/setup-go@v5 instead of v4
    • Clarifies behavior when go-version-file input omits the patch version
  • package.json:
    • Updates dependencies including @actions/cache, @actions/http-client, semver
    • Updates dev dependencies including @types/node, eslint, ts-jest, typescript
  • dist/cache-save/index.js, dist/setup/index.js:
    • Regenerated dist files with updated dependencies
  • docs/contributors.md:
    • Minor formatting changes to emoji placement

Security Hotspots

  • The regenerated dist files should be carefully reviewed for any unexpected changes, as they could potentially introduce vulnerabilities. However, the risk is relatively low since the changes are the result of updating dependencies to their latest versions.
  • Updating dependencies always carries some risk, but the updates appear to be minor/patch releases which are unlikely to introduce breaking changes. The semver package in particular enforces semantic versioning conventions.

Overall this looks like a relatively low-risk maintenance update to keep the action current. The main changes are the Node runtime update and dependency version bumps. Reviewing the changelog/release notes for the updated dependencies is advised but no major issues are expected.

@mschfh mschfh merged commit dc68f37 into master May 6, 2024
7 checks passed
@mschfh mschfh deleted the renovate/actions-setup-go-5.x branch May 6, 2024 23:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant