fix(deps): update all (major)

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Age	Confidence
actions/cache	action	major	v3.0.4 → v5.0.1
actions/checkout	action	major	v2.4.0 → v6.0.1
actions/setup-go	action	major	v2 → v6
alex (source)	dependencies	major	10.0.0 → 11.0.1
codecov/codecov-action	action	major	v2.1.0 → v5.5.2
ghcr.io/codfish/semantic-release-action	docker	major	v1 → v4
golangci/golangci-lint-action	action	major	v3.2.0 → v9.2.0
goreleaser/goreleaser-action	action	major	v2.9.0 → v6.4.0

---

Release Notes

actions/cache (actions/cache)

v5.0.1

Compare Source

v5.0.0

Compare Source

v4.3.0

Compare Source

What's Changed

• Add note on runner versions by @​GhadimiR in #​1642
• Prepare v4.3.0 release by @​Link- in #​1655

New Contributors

• @​GhadimiR made their first contribution in #​1642

Full Changelog: actions/cache@v4...v4.3.0

v4.2.4

Compare Source

What's Changed

• Update README.md by @​nebuk89 in #​1620
• Upgrade @actions/cache to 4.0.5 and move @protobuf-ts/plugin to dev depdencies by @​Link- in #​1634
• Prepare release 4.2.4 by @​Link- in #​1636

New Contributors

• @​nebuk89 made their first contribution in #​1620

Full Changelog: actions/cache@v4...v4.2.4

v4.2.3

Compare Source

What's Changed

• Update to use @​actions/cache 4.0.3 package & prepare for new release by @​salmanmkc in #​1577 (SAS tokens for cache entries are now masked in debug logs)

New Contributors

• @​salmanmkc made their first contribution in #​1577

Full Changelog: actions/cache@v4.2.2...v4.2.3

v4.2.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

• Bump @​actions/cache to v4.0.2 by @​robherley in #​1560

Full Changelog: actions/cache@v4.2.1...v4.2.2

v4.2.1

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v4.2.0, see those release notes and the announcement for more details.

• docs: GitHub is spelled incorrectly in caching-strategies.md by @​janco-absa in #​1526
• docs: Make the "always save prime numbers" example more clear by @​Tobbe in #​1525
• Update force deletion docs due a recent deprecation by @​sebbalex in #​1500
• Bump @​actions/cache to v4.0.1 by @​robherley in #​1554

New Contributors

• @​janco-absa made their first contribution in #​1526
• @​Tobbe made their first contribution in #​1525
• @​sebbalex made their first contribution in #​1500

Full Changelog: actions/cache@v4.2.0...v4.2.1

v4.2.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

• @​actions/core: 1.11.1
• @​actions/io: 1.1.3
• @​vercel/ncc: 0.38.3

Full Changelog: actions/cache@v4.1.2...v4.2.0

v4.1.2

Compare Source

What's Changed

• Add Bun example by @​idleberg in #​1456
• Revise isGhes logic by @​jww3 in #​1474
• Bump braces from 3.0.2 to 3.0.3 by @​dependabot in #​1475
• Add dependabot.yml to enable automatic dependency upgrades by @​Link- in #​1476
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1478
• Bump actions/stale from 3 to 9 by @​dependabot in #​1479
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1483
• Bump actions/setup-node from 3 to 4 by @​dependabot in #​1481
• Prepare 4.1.2 release by @​Link- in #​1477

New Contributors

• @​idleberg made their first contribution in #​1456
• @​jww3 made their first contribution in #​1474
• @​Link- made their first contribution in #​1476

Full Changelog: actions/cache@v4.1.1...v4.1.2

v4.1.1

Compare Source

What's Changed

• Restore original behavior of cache-hit output by @​joshmgross in #​1467

Full Changelog: actions/cache@v4.1.0...v4.1.1

v4.1.0

Compare Source

What's Changed

• Fix cache-hit output when cache missed by @​fchimpan in #​1404
• Deprecate save-always input by @​joshmgross in #​1452

New Contributors

• @​ottlinger made their first contribution in #​1437
• @​Olegt0rr made their first contribution in #​1377
• @​fchimpan made their first contribution in #​1404
• @​x612skm made their first contribution in #​1434
• @​todgru made their first contribution in #​1311
• @​Jcambass made their first contribution in #​1463
• @​mackey0225 made their first contribution in #​1462
• @​quatquatt made their first contribution in #​1445

Full Changelog: actions/cache@v4.0.2...v4.1.0

v4.0.2

Compare Source

What's Changed

• Fix fail-on-cache-miss not working by @​cdce8p in #​1327

Full Changelog: actions/cache@v4.0.1...v4.0.2

v4.0.1

Compare Source

What's Changed

• Update README.md by @​yacaovsnc in #​1304
• Update examples by @​yacaovsnc in #​1305
• Update actions/cache publish flow by @​bethanyj28 in #​1340
• Update @​actions/cache by @​bethanyj28 in #​1341

New Contributors

• @​yacaovsnc made their first contribution in #​1304

Full Changelog: actions/cache@v4...v4.0.1

v4.0.0

Compare Source

What's Changed

• Update action to node20 by @​takost in #​1284
• feat: save-always flag by @​to-s in #​1242

New Contributors

• @​takost made their first contribution in #​1284
• @​to-s made their first contribution in #​1242

Full Changelog: actions/cache@v3...v4.0.0

v3.5.0

Compare Source

• Bump actions/cache to v4.1.0

Full Changelog: actions/cache@v3...v3.5.0

v3.4.3

Compare Source

What's Changed

• Bump @​actions/cache to v4.0.2 by @​robherley

Full Changelog: actions/cache@v3.4.2...v3.4.3

v3.4.2

Compare Source

What's Changed

[!IMPORTANT]
As a reminder, there were important backend changes to release v3.4.0, see those release notes and the announcement for more details.

• Bump @​actions/cache to v4.0.1 by @​robherley in #​1554

Full Changelog: actions/cache@v3.4.0...v3.4.2

v3.4.1

Compare Source

[!WARNING]
This version was incorrectly released using a SHA pointing to a newer version for immutable actions only. Please use v3.4.2 (or v3) instead.

v3.4.0

Compare Source

⚠️ Important Changes

The cache backend service has been rewritten from the ground up for improved performance and reliability. actions/cache now integrates with the new cache service (v2) APIs.

The new service will gradually roll out as of February 1st, 2025. The legacy service will also be sunset on the same date. Changes in these release are fully backward compatible.

We are deprecating some versions of this action. We recommend upgrading to version v4 or v3 as soon as possible before February 1st, 2025. (Upgrade instructions below).

If you are using pinned SHAs, please use the SHAs of versions v4.2.0 or v3.4.0

If you do not upgrade, all workflow runs using any of the deprecated actions/cache will fail.

Upgrading to the recommended versions will not break your workflows.

Read more about the change & access the migration guide: reference to the announcement.

Minor changes

Minor and patch version updates for these dependencies:

• @​actions/core: 1.11.1
• @​actions/io: 1.1.3
• @​vercel/ncc: 0.38.3

Full Changelog: actions/cache@v3.3.3...v3.4.0

v3.3.3

Compare Source

What's Changed

• Cache v3.3.3 by @​robherley in #​1302

New Contributors

• @​robherley made their first contribution in #​1302

Full Changelog: actions/cache@v3...v3.3.3

v3.3.2

Compare Source

What's Changed

• Fixed readme with new segment timeout values by @​kotewar in #​1133
• Readme fixes by @​kotewar in #​1134
• Updated description of the lookup-only input for main action by @​kotewar in #​1130
• Change two new actions mention as quoted text by @​bishal-pdMSFT in #​1131
• Update Cross-OS Caching tips by @​pdotl in #​1122
• Bazel example (Take #​2️⃣) by @​vorburger in #​1132
• Remove actions to add new PRs and issues to a project board by @​jorendorff in #​1187
• Consume latest toolkit and fix dangling promise bug by @​chkimes in #​1217
• Bump action version to 3.3.2 by @​bethanyj28 in #​1236

New Contributors

• @​vorburger made their first contribution in #​1132
• @​jorendorff made their first contribution in #​1187
• @​chkimes made their first contribution in #​1217
• @​bethanyj28 made their first contribution in #​1236

Full Changelog: actions/cache@v3...v3.3.2

v3.3.1

Compare Source

What's Changed

• Reduced download segment size to 128 MB and timeout to 10 minutes by @​kotewar in #​1129

Full Changelog: actions/cache@v3...v3.3.1

v3.3.0

Compare Source

What's Changed

• Bug: Permission is missing in cache delete example by @​kotokaze in #​1123
• Add lookup-only option by @​cdce8p in #​1041

New Contributors

• @​kotokaze made their first contribution in #​1123

Full Changelog: actions/cache@v3...v3.3.0

v3.2.6

Compare Source

What's Changed

• Updated branch in Force deletion of caches by @​t-dedah in #​1108
• Fix zstd not being used after zstd version upgrade to 1.5.4 on hosted runners by @​pdotl in #​1118

Full Changelog: actions/cache@v3...v3.2.6

v3.2.5

Compare Source

What's Changed

• Rewrite readmes by @​jsoref in #​1085
• Fixed typos and formatting in docs by @​kotewar in #​1076
• Fixing paths for OSes by @​kotewar in #​1101
• Release patch version update by @​Phantsure in #​1105

New Contributors

• @​jsoref made their first contribution in #​1085

Full Changelog: actions/cache@v3...v3.2.5

v3.2.4

Compare Source

What's Changed

• Update json5 package version by @​vsvipul in #​1065
• Cache recipes for cache, restore and save actions by @​kotewar in #​1055
• Add gnu tar and zstd as pre-requisites for windows self-hosted runners by @​pdotl in #​1068
• Fix a whitespace typo by @​kurtmckee in #​1074
• 📝 #​1045 update using the set-output command is deprecated by @​siguikesse in #​1046
• Fix referenced output key in save action readme by @​ruudk in #​1061
• Update workflows to use reusable-workflows by @​jongwooo in #​1066
• Introduce add-to-project step & rename workflow files by @​pallavx in #​1077
• chore: Fix syntax error typo by @​vHeemstra in #​1081
• Update caching-strategies.md by @​kpfleming in #​1084
• Added another usage hint to foresee #​1072 by @​maybeec in #​1089
• Add fail-on-cache-miss option by @​cdce8p in #​1036

New Contributors

• @​kurtmckee made their first contribution in #​1074
• @​siguikesse made their first contribution in #​1046
• @​ruudk made their first contribution in #​1061
• @​pallavx made their first contribution in #​1077
• @​vHeemstra made their first contribution in #​1081
• @​kpfleming made their first contribution in #​1084
• @​maybeec made their first contribution in #​1089
• @​cdce8p made their first contribution in #​1036

Full Changelog: actions/cache@v3...v3.2.4

v3.2.3

Compare Source

What's Changed

• Add Mint example by @​uhooi in #​1051
• Fixed broken link by @​kotewar in #​1057
• Add support to opt-in enable cross-os caching on windows by @​Phantsure in #​1056
• Release support for cross-os caching as opt-in feature by @​Phantsure in #​1060

New Contributors

• @​uhooi made their first contribution in #​1051

Full Changelog: actions/cache@v3...v3.2.3

v3.2.2

Compare Source

What's Changed

• Fix formatting error in restore/README.md by @​me-and in #​1044
• save/README.md: Fix typo in example by @​mmuetzel in #​1040
• README.md: remove outdated Windows cache tip link by @​me-and in #​1042
• Revert compression changes related to windows but keep version logging by @​Phantsure in #​1049

New Contributors

• @​me-and made their first contribution in #​1044
• @​mmuetzel made their first contribution in #​1040

Full Changelog: actions/cache@v3.2.1...v3.2.2

v3.2.1

Compare Source

What's Changed

• Release compression related changes for windows by @​Phantsure in #​1039
• Upgrade codeql to v2 by @​Phantsure in #​1023

Full Changelog: actions/cache@v3.2.0...v3.2.1

v3.2.0

Compare Source

What's Changed

• fix wrong timeout env var key in README.md by @​walterddr in #​959
• Updated release doc with correct env variable by @​kotewar in #​960
• Create pull_request_template.md by @​pdotl in #​963
• Update README with clearer info about cache-hit and its value by @​kotewar in #​961
• Change datadog/squid to Ubuntu/squid in CI check by @​bishal-pdMSFT in #​976
• Add more details to version section in readme by @​bishal-pdMSFT in #​971
• Update hashFiles documentation reference by @​asaf400 in #​979
• Updated link for cache segment download info by @​kotewar in #​986
• Readme update for deleting caches by @​t-dedah in #​981
• Add oncall logic to assign issues and PRs by @​vsvipul in #​997
• Bump minimatch from 3.0.4 to 3.1.2 by @​dependabot in #​998
• Revert "Bump minimatch from 3.0.4 to 3.1.2" by @​vsvipul in #​1005
• Fix npm vulnerability by @​Phantsure in #​1007
• refactor: Use early return pattern to avoid nested conditions by @​jongwooo in #​1013
• Use cache in check-dist.yml by @​jongwooo in #​1004
• chore: Use built-in cache action to cache dependencies by @​jongwooo in #​1014
• Updated node example by @​t-dedah in #​1008
• Fix: Node npm doc example by @​apascualm in #​1026
• docs: fix an invalid link in workarounds.md by @​teatimeguest in #​929
• General Availability release for granular cache by @​kotewar in #​1035 More details here on beta release.

New Contributors

• @​walterddr made their first contribution in #​959
• @​asaf400 made their first contribution in #​979
• @​jongwooo made their first contribution in #​1013
• @​apascualm made their first contribution in #​1026
• @​teatimeguest made their first contribution in #​929

Full Changelog: actions/cache@v3...v3.2.0

v3.0.11

Compare Source

What's Changed

• Call out cache not saved on hit by @​Phantsure in #​946
• Update @​actions/core to 1.10.0 by @​rentziass in #​950
• Update cache to use @​actions/core@​^1.10.0 by @​pdotl in #​956

New Contributors

• @​rentziass made their first contribution in #​950

Full Changelog: actions/cache@v3...v3.0.11

v3.0.10

Compare Source

• Fix a bug with sorting inputs.
• Update definition for restore-keys in README.md

v3.0.9

Compare Source

• Enhanced the warning message for cache unavailability in case of GHES.

v3.0.8

Compare Source

What's Changed

• Fix zstd not working for windows on gnu tar in issues.
• Allow users to provide a custom timeout as input for aborting cache segment download using the environment variable SEGMENT_DOWNLOAD_TIMEOUT_MIN. Default is 60 minutes.

v3.0.7

Compare Source

What's Changed

• Fix for the download stuck problem has been added in actions/cache for users who were intermittently facing the issue. As part of this fix, new timeout has been introduced in the download step to stop the download if it doesn't complete within an hour and run the rest of the workflow without erroring out.

v3.0.6

Compare Source

What's Changed

• Add example for clojure lein project dependencies by @​shivamarora1 in PR #​835
• Update toolkit's cache npm module to latest. Bump cache version to v3.0.6 by @​pdotl in PR #​887
• Fix issue #​809 where cache save/restore was failing for Amazon Linux 2 runners due to older tar version
• Fix issue #​833 where cache save was not working for caching github workspace directory

New Contributors

• @​shivamarora1 made their first contribution in #​835
• @​pdotl made their first contribution in #​887

Full Changelog: actions/cache@v3...v3.0.6

v3.0.5

Compare Source

Removed error handling by consuming actions/cache 3.0 toolkit, Now cache server error handling will be done by toolkit.

actions/checkout (actions/checkout)

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.0.1

Compare Source

What's Changed

• Port v6 cleanup to v5 by @​ericsciple in #​2301

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

Compare Source

What's Changed

• Update actions checkout to use node 24 by @​salmanmkc in #​2226
• Prepare v5.0.0 release by @​salmanmkc in #​2238

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

Make sure your runner is updated to this version or newer to use this release.

Full Changelog: actions/checkout@v4...v5.0.0

v4.3.1

Compare Source

What's Changed

• Port v6 cleanup to v4 by @​ericsciple in #​2305

Full Changelog: actions/checkout@v4...v4.3.1

v4.3.0

Compare Source

What's Changed

• docs: update README.md by @​motss in #​1971
• Add internal repos for checking out multiple repositories by @​mouismail in #​1977
• Documentation update - add recommended permissions to Readme by @​benwells in #​2043
• Adjust positioning of user email note and permissions heading by @​joshmgross in #​2044
• Update README.md by @​nebuk89 in #​2194
• Update CODEOWNERS for actions by @​TingluoHuang in #​2224
• Update package dependencies by @​salmanmkc in #​2236
• Prepare release v4.3.0 by @​salmanmkc in #​2237

New Contributors

• @​motss made their first contribution in #​1971
• @​mouismail made their first contribution in #​1977
• @​benwells made their first contribution in #​2043
• @​nebuk89 made their first contribution in #​2194
• @​salmanmkc made their first contribution in #​2236

Full Changelog: actions/checkout@v4...v4.3.0

v4.2.2

Compare Source

• url-helper.ts now leverages well-known environment variables by @​jww3 in #​1941
• Expand unit test coverage for isGhes by @​jww3 in #​1946

v4.2.1

Compare Source

• Check out other refs/* by commit if provided, fall back to ref by @​orhantoy in #​1924

v4.2.0

Compare Source

• Add Ref and Commit outputs by @​lucacome in #​1180
• Dependency updates by @​dependabot- #​1777, #​1872

v4.1.7

Compare Source

• Bump the minor-npm-dependencies group across 1 directory with 4 updates by @​dependabot in #​1739
• Bump actions/checkout from 3 to 4 by @​dependabot in #​1697
• Check out other refs/* by commit by @​orhantoy in #​1774
• Pin actions/checkout's own workflows to a known, good, stable version. by @​jww3 in #​1776

v4.1.6

Compare Source

• Check platform to set archive extension appropriately by @​cory-miller in #​1732

v4.1.5

Compare Source

• Update NPM dependencies by @​cory-miller in #​1703
• Bump github/codeql-action from 2 to 3 by @​dependabot in #​1694
• Bump actions/setup-node from 1 to 4 by @​dependabot in #​1696
• Bump actions/upload-artifact from 2 to 4 by @​dependabot in #​1695
• README: Suggest user.email to be 41898282+github-actions[bot]@​users.noreply.github.com by @​cory-miller in #​1707

v4.1.4

Compare Source

• Disable extensions.worktreeConfig when disabling sparse-checkout by @​jww3 in #​1692
• Add dependabot config by @​cory-miller in #​1688
• Bump the minor-actions-dependencies group with 2 updates by @​dependabot in #​1693
• Bump word-wrap from 1.2.3 to 1.2.5 by @​dependabot in #​1643

v4.1.3

Compare Source

• Check git version before attempting to disable sparse-checkout by @​jww3 in #​1656
• Add SSH user parameter by @​cory-miller in #​1685
• Update actions/checkout version in update-main-version.yml by @​jww3 in #​1650

v4.1.2

Compare Source

• Fix: Disable sparse checkout whenever sparse-checkout option is not present @​dscho in #​1598

v4.1.1

Compare Source

• Correct link to GitHub Docs by @​peterbe in #​1511
• Link to release page from what's new section by @​cory-miller in #​1514

v4.1.0

Compare Source

• Add support for partial checkout filters

v4.0.0

Compare Source

• Support fetching without the --progress option
• Update to node20

v3.6.0

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

v3.5.3

Compare Source

• Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in
• Fix typos found by codespell
• Add support for sparse checkouts

v3.5.2

Compare Source

• Fix api endpoint for GHES

v3.5.1

Compare Source

• Fix slow checkout on Windows

v3.5.0

Compare Source

• Add new public key for known_hosts

v3.4.0

Compare Source

• Upgrade codeql actions to v2
• Upgrade dependencies
• Upgrade @​actions/io

v3.3.0

Compare Source

• Implement branch list using callbacks from exec function
• Add in explicit reference to private checkout options
• Fix comment typos (that got added in #​770)

v3.2.0

Compare Source

• Add GitHub Action to perform release
• [Fix status badge](https://redirect.github.com/actions/che

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 0.00%. Comparing base (1e94ae7) to head (5a37239).

❗ Current head 5a37239 differs from pull request most recent head e1bf9e5

Please upload reports for the commit e1bf9e5 to get more accurate results.

Additional details and impacted files

@@          Coverage Diff          @@
##            main     #54   +/-   ##
=====================================
  Coverage   0.00%   0.00%           
=====================================
  Files          1       1           
  Lines         49      49           
=====================================
  Misses        49      49           

Flag	Coverage Δ
unittests	0.00% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	npm/​alex@​10.0.0 ⏵ 11.0.1	+1

View full report