sudo-bmitch · sudo-bmitch · Jan 12, 2025 · Jan 12, 2025
diff --git a/.github/workflows/docker.yml b/.github/workflows/docker.yml
@@ -97,7 +97,7 @@ jobs:
         password: ${{ secrets.GHCR_TOKEN }}
 
     - name: Build and push
-      uses: docker/build-push-action@48aba3b46d1b1fec4febb7c5d0c644b249a11355 # v6.10.0
+      uses: docker/build-push-action@b32b51a8eda65d6793cd0494a773d4f6bcef32dc # v6.11.0
       id: build
       with:
         context: .

diff --git a/.github/workflows/go.yml b/.github/workflows/go.yml
@@ -78,7 +78,7 @@ jobs:
     - name: Create release
       if: steps.release_details.outputs.valid == 'true' && matrix.gover == env.RELEASE_GO_VER
       id: release_create
-      uses: softprops/action-gh-release@7b4da11513bf3f43f9999e90eabced41ab8bb048 # v2.2.0
+      uses: softprops/action-gh-release@c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda # v2.2.1
       env:
         GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
       with:
@@ -96,7 +96,7 @@ jobs:
 
     - name: Save artifacts
       if: github.ref == 'refs/heads/main' && matrix.gover == env.RELEASE_GO_VER
-      uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
+      uses: actions/upload-artifact@65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08 # v4.6.0
       with:
         name: binaries
         path: ./artifacts/

diff --git a/.version-bump.lock b/.version-bump.lock
@@ -1,29 +1,29 @@
-{"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.21.0","version":"sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45"}
-{"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.21.0"}
-{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.23.4-alpine","version":"sha256:6c5c9590f169f77c8046e45c611d3b28fe477789acd8d3762d23d4744de69812"}
+{"name":"docker-arg-alpine-digest","key":"docker.io/library/alpine:3.21.2","version":"sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099"}
+{"name":"docker-arg-alpine-tag","key":"docker.io/library/alpine","version":"3.21.2"}
+{"name":"docker-arg-go-digest","key":"docker.io/library/golang:1.23.4-alpine","version":"sha256:c23339199a08b0e12032856908589a6d41a0dab141b8b3b21f156fc571a3f1d3"}
 {"name":"docker-arg-go-tag","key":"docker.io/library/golang","version":"1.23.4"}
 {"name":"gha-golang-matrix","key":"golang-matrix","version":"[\"1.21\", \"1.22\", \"1.23\"]"}
 {"name":"gha-golang-release","key":"golang-latest","version":"1.23"}
 {"name":"gha-uses-commit","key":"https://github.com/actions/checkout.git:v4.2.2","version":"11bd71901bbe5b1630ceea73d27597364c9af683"}
 {"name":"gha-uses-commit","key":"https://github.com/actions/setup-go.git:v5.2.0","version":"3041bf56c941b39c61721a86cd11f3bb1338122a"}
-{"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v4.5.0","version":"6f51ac03b9356f520e9adb1b1b7802705f340c2b"}
-{"name":"gha-uses-commit","key":"https://github.com/docker/build-push-action.git:v6.10.0","version":"48aba3b46d1b1fec4febb7c5d0c644b249a11355"}
+{"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v4.6.0","version":"65c4c4a1ddee5b72f698fdd19549f0f0fb45cf08"}
+{"name":"gha-uses-commit","key":"https://github.com/docker/build-push-action.git:v6.11.0","version":"b32b51a8eda65d6793cd0494a773d4f6bcef32dc"}
 {"name":"gha-uses-commit","key":"https://github.com/docker/login-action.git:v3.3.0","version":"9780b0c442fbb1117ed29e0efdff1e18412f7567"}
 {"name":"gha-uses-commit","key":"https://github.com/docker/setup-buildx-action.git:v3.8.0","version":"6524bf65af31da8d45b59e8c27de4bd072b392f5"}
 {"name":"gha-uses-commit","key":"https://github.com/sigstore/cosign-installer.git:v3.7.0","version":"dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da"}
-{"name":"gha-uses-commit","key":"https://github.com/softprops/action-gh-release.git:v2.2.0","version":"7b4da11513bf3f43f9999e90eabced41ab8bb048"}
+{"name":"gha-uses-commit","key":"https://github.com/softprops/action-gh-release.git:v2.2.1","version":"c95fe1489396fe8a9eb87c0abf8aa5b2ef267fda"}
 {"name":"gha-uses-semver","key":"https://github.com/actions/checkout.git","version":"v4.2.2"}
 {"name":"gha-uses-semver","key":"https://github.com/actions/setup-go.git","version":"v5.2.0"}
-{"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v4.5.0"}
-{"name":"gha-uses-semver","key":"https://github.com/docker/build-push-action.git","version":"v6.10.0"}
+{"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v4.6.0"}
+{"name":"gha-uses-semver","key":"https://github.com/docker/build-push-action.git","version":"v6.11.0"}
 {"name":"gha-uses-semver","key":"https://github.com/docker/login-action.git","version":"v3.3.0"}
 {"name":"gha-uses-semver","key":"https://github.com/docker/setup-buildx-action.git","version":"v3.8.0"}
 {"name":"gha-uses-semver","key":"https://github.com/sigstore/cosign-installer.git","version":"v3.7.0"}
-{"name":"gha-uses-semver","key":"https://github.com/softprops/action-gh-release.git","version":"v2.2.0"}
+{"name":"gha-uses-semver","key":"https://github.com/softprops/action-gh-release.git","version":"v2.2.1"}
 {"name":"go-mod-golang-release","key":"golang-oldest","version":"1.21"}
 {"name":"makefile-go-vulncheck","key":"https://go.googlesource.com/vuln.git","version":"v1.1.3"}
 {"name":"makefile-gomajor","key":"https://github.com/icholy/gomajor.git","version":"v0.14.0"}
-{"name":"makefile-gosec","key":"https://github.com/securego/gosec.git","version":"v2.21.4"}
+{"name":"makefile-gosec","key":"https://github.com/securego/gosec.git","version":"v2.22.0"}
 {"name":"makefile-markdown-lint","key":"docker.io/davidanson/markdownlint-cli2","version":"v0.17.1"}
 {"name":"makefile-osv-scanner","key":"https://github.com/google/osv-scanner.git","version":"v1.9.2"}
 {"name":"makefile-staticcheck","key":"https://github.com/dominikh/go-tools.git","version":"v0.5.1"}

diff --git a/Dockerfile b/Dockerfile
@@ -1,6 +1,6 @@
 ARG REGISTRY=docker.io
-ARG ALPINE_VER=3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
-ARG GO_VER=1.23.4-alpine@sha256:6c5c9590f169f77c8046e45c611d3b28fe477789acd8d3762d23d4744de69812
+ARG ALPINE_VER=3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
+ARG GO_VER=1.23.4-alpine@sha256:c23339199a08b0e12032856908589a6d41a0dab141b8b3b21f156fc571a3f1d3
 
 FROM ${REGISTRY}/library/golang:${GO_VER} AS build
 RUN apk add --no-cache \

diff --git a/Dockerfile.buildkit b/Dockerfile.buildkit
@@ -1,6 +1,6 @@
 ARG REGISTRY=docker.io
-ARG ALPINE_VER=3.21.0@sha256:21dc6063fd678b478f57c0e13f47560d0ea4eeba26dfc947b2a4f81f686b9f45
-ARG GO_VER=1.23.4-alpine@sha256:6c5c9590f169f77c8046e45c611d3b28fe477789acd8d3762d23d4744de69812
+ARG ALPINE_VER=3.21.2@sha256:56fa17d2a7e7f168a043a2712e63aed1f8543aeafdcee47c58dcffe38ed51099
+ARG GO_VER=1.23.4-alpine@sha256:c23339199a08b0e12032856908589a6d41a0dab141b8b3b21f156fc571a3f1d3
 
 FROM --platform=$BUILDPLATFORM ${REGISTRY}/library/golang:${GO_VER} AS build
 RUN apk add --no-cache \

diff --git a/Makefile b/Makefile
@@ -19,7 +19,7 @@ GOPATH?=$(shell go env GOPATH)
 PWD:=$(shell pwd)
 MARKDOWN_LINT_VER?=v0.17.1
 GOMAJOR_VER?=v0.14.0
-GOSEC_VER?=v2.21.4
+GOSEC_VER?=v2.22.0
 GO_VULNCHECK_VER?=v1.1.3
 OSV_SCANNER_VER?=v1.9.2
 STATICCHECK_VER?=v0.5.1