chore(deps): update actions/setup-go action to v6#124
chore(deps): update actions/setup-go action to v6#124renovate[bot] wants to merge 1 commit intomainfrom
Conversation
6640528 to
393dacc
Compare
393dacc to
28c3cab
Compare
28c3cab to
5704e31
Compare
5704e31 to
74c5857
Compare
74c5857 to
07fd933
Compare
07fd933 to
d56fc8d
Compare
d56fc8d to
918fb12
Compare
918fb12 to
bfc8ad3
Compare
bfc8ad3 to
87aaf34
Compare
📝 WalkthroughWalkthroughUpdated the GitHub Actions workflow file to upgrade the setup-go action from version 5 to version 6, while preserving all existing configuration parameters (check-latest, cache, go-version stable). Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~2 minutes Poem
🚥 Pre-merge checks | ✅ 3✅ Passed checks (3 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
There was a problem hiding this comment.
🧹 Nitpick comments (1)
.github/workflows/build.yml (1)
18-18: Pinactions/setup-goto a full commit SHA for supply-chain integrity.Using
@v6relies on mutable tag references. GitHub recommends pinning GitHub Actions to full-length commit SHAs—the only way to ensure immutability and reproducibility.Update line 18 to:
- uses: actions/setup-go@<40-char-sha>(e.g.,actions/setup-go@a0c5abb4), where the SHA matches the current release. Use Dependabot to automate future updates.🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed. In @.github/workflows/build.yml at line 18, Replace the mutable tag in the workflow step that currently reads "uses: actions/setup-go@v6" with a full-length commit SHA for immutability; locate the line containing uses: actions/setup-go@v6 in the build.yml and update it to uses: actions/setup-go@<40-char-commit-sha> (obtain the exact SHA from the actions/setup-go GitHub repo release or use Dependabot to manage updates).
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Nitpick comments:
In @.github/workflows/build.yml:
- Line 18: Replace the mutable tag in the workflow step that currently reads
"uses: actions/setup-go@v6" with a full-length commit SHA for immutability;
locate the line containing uses: actions/setup-go@v6 in the build.yml and update
it to uses: actions/setup-go@<40-char-commit-sha> (obtain the exact SHA from the
actions/setup-go GitHub repo release or use Dependabot to manage updates).
ℹ️ Review info
⚙️ Run configuration
Configuration used: defaults
Review profile: CHILL
Plan: Pro
Run ID: 4a648cf2-3df4-47fa-b770-9c3a325269aa
📒 Files selected for processing (1)
.github/workflows/build.yml
This PR contains the following updates:
v5→v6Release Notes
actions/setup-go (actions/setup-go)
v6Compare Source
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.