From 9d22501baac28436d4dc75e4eecd8c0c9aefefdb Mon Sep 17 00:00:00 2001 From: Renn F Date: Sun, 25 Oct 2026 18:11:00 +0100 Subject: [PATCH 1/2] chore(deps): bump workflow actions together and dependency groups Workflow refs: analyze v4.39.0->v4.39.1,analyze v4.39.0->v4.39.1,init v4.39.0->v4.39.1,init v4.39.0->v4.39.1,autobuild v4.39.0->v4.39.1. All references of each multi-step action move in one commit so workflows such as CodeQL run against a single action version; single-step Dependabot PRs leave the steps of one workflow on different versions and fail their own CI. I also grouped github-actions updates in .github/dependabot.yml so future action bumps arrive as one weekly PR instead of one PR per workflow step. --- .github/dependabot.yml | 4 ++++ .github/workflows/code-ql.yml | 10 +++++----- 2 files changed, 9 insertions(+), 5 deletions(-) diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 5043979..786726c 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,6 +7,10 @@ updates: day: "monday" time: "02:00" timezone: "UTC" + groups: + actions: + patterns: + - "*" - package-ecosystem: "gomod" directory: "/" diff --git a/.github/workflows/code-ql.yml b/.github/workflows/code-ql.yml index 9832882..85469eb 100644 --- a/.github/workflows/code-ql.yml +++ b/.github/workflows/code-ql.yml @@ -26,15 +26,15 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: languages: go - name: Autobuild - uses: github/codeql-action/autobuild@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/autobuild@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 # A job of its own, so the required `Analyze (go)` check keeps its name and the Go analysis keeps its category. analyze-actions: @@ -51,10 +51,10 @@ jobs: persist-credentials: false - name: Initialize CodeQL - uses: github/codeql-action/init@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/init@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 with: languages: actions build-mode: none - name: Perform CodeQL Analysis - uses: github/codeql-action/analyze@6f2ac81f5cd81fe351a197ba0b00d91d03cd2aee # v4.39.0 + uses: github/codeql-action/analyze@9b3254085494b55a0f7c4c2b3d2d52cc712ce370 # v4.39.1 From ee196b425f671a1a5dc4757f1b6c02c3df9c9665 Mon Sep 17 00:00:00 2001 From: Renn F Date: Sun, 25 Oct 2026 18:11:01 +0100 Subject: [PATCH 2/2] build(deps): apply Dependabot #33 file updates --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 5a9cd13..eb7c492 100644 --- a/go.mod +++ b/go.mod @@ -3,7 +3,7 @@ module github.com/rennf93/prest-guard go 1.26.0 require ( - github.com/rennf93/guard-core-go/v4 v4.4.0 + github.com/rennf93/guard-core-go/v4 v4.4.1 github.com/rennf93/nethttp-guard v1.5.0 github.com/urfave/negroni/v3 v3.1.1 ) diff --git a/go.sum b/go.sum index 7ccb16a..bf8bab6 100644 --- a/go.sum +++ b/go.sum @@ -12,8 +12,8 @@ github.com/oschwald/maxminddb-golang v1.13.1 h1:G3wwjdN9JmIK2o/ermkHM+98oX5fS+k5 github.com/oschwald/maxminddb-golang v1.13.1/go.mod h1:K4pgV9N/GcK694KSTmVSDTODk4IsCNThNdTmnaBZ/F8= github.com/redis/go-redis/v9 v9.23.0 h1:/TTVdJa8BRNsybwwGGnmiYktHNlUXtbOQxlWpHBPL3s= github.com/redis/go-redis/v9 v9.23.0/go.mod h1:EWP2UUk+XDaI1s5nQB5mablZN6vccXlmBQTyfnF87D0= -github.com/rennf93/guard-core-go/v4 v4.4.0 h1:+la36FG7WWr65gCc0Rq6RyIGC4Aiy+w91tQzH1SCndg= -github.com/rennf93/guard-core-go/v4 v4.4.0/go.mod h1:6KcajSAwPjYhYxY48nqdrgihH+sXf0NIt6lGMNpKyaU= +github.com/rennf93/guard-core-go/v4 v4.4.1 h1:tRLMLUGpbD9vNpP5xjPUWFayCrhiS04y66/ypzZhdq0= +github.com/rennf93/guard-core-go/v4 v4.4.1/go.mod h1:6KcajSAwPjYhYxY48nqdrgihH+sXf0NIt6lGMNpKyaU= github.com/rennf93/nethttp-guard v1.5.0 h1:i+ByOlfazOraR/YGsd3TddMo6LmX20h3f8NFmp+Og1Y= github.com/rennf93/nethttp-guard v1.5.0/go.mod h1:tobelI4/Z3CNMBjpCCcvSAoBG1FFouDq5MWvckE/pJ4= github.com/stretchr/testify v1.12.1 h1:EuwCh5fleGS7H32xRwO3wRGT7DxrDhLAT6FF8MpWDWE=