From 76b5c848063027a648b8659606f77630290a91d7 Mon Sep 17 00:00:00 2001 From: Bez625 Date: Thu, 22 Oct 2026 14:06:00 +0100 Subject: [PATCH 1/2] chore(ci): bump actions off EOL Node runtimes Node 12/16/20 are EOL and will not receive the fixes from the October 2026 Node.js security releases (22.23.4 / 24.22.1 / 26.12.1), including CVE-2026-111497 (out-of-bounds write in the Brotli decoder, RCE). Bumps pinned actions to releases that declare `using: node24`. Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/golangci-lint.yml | 4 ++-- .github/workflows/release.yml | 12 ++++++------ .github/workflows/test.yml | 4 ++-- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index be3622d..e02e6dd 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -15,11 +15,11 @@ jobs: name: 'lint' runs-on: 'ubuntu-22.04' steps: - - uses: 'actions/setup-go@v5' + - uses: 'actions/setup-go@v7' with: cache: false go-version: '1.22' - - uses: 'actions/checkout@v4' + - uses: 'actions/checkout@v6' - name: 'golangci-lint' uses: 'golangci/golangci-lint-action@v6' with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 5e5fda0..e0f7944 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -44,13 +44,13 @@ jobs: needs: [create_release, env_vars] steps: - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: cache: false go-version: '^1.21' - name: Check out repository into the Go module directory - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -120,13 +120,13 @@ jobs: needs: [create_release, env_vars] steps: - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: cache: false go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -166,13 +166,13 @@ jobs: needs: [create_release, env_vars] steps: - name: Set up Go - uses: actions/setup-go@v5 + uses: actions/setup-go@v7 with: cache: false go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v4 + uses: actions/checkout@v6 - name: Select correct tag run: git checkout ${{ github.ref_name }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index 3174529..b7deec9 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -8,11 +8,11 @@ jobs: test: runs-on: ubuntu-22.04 steps: - - uses: actions/setup-go@v5 + - uses: actions/setup-go@v7 with: cache: false go-version: '1.22' - - uses: actions/checkout@v4 + - uses: actions/checkout@v6 - uses: n8maninger/action-golang-test@v2 with: args: "-race;-timeout=30m" From 9419ddad574eac521493defd43dd5f4ab25e37c7 Mon Sep 17 00:00:00 2001 From: Chris Berry Date: Mon, 26 Oct 2026 11:07:42 +0000 Subject: [PATCH 2/2] chore(ci): use actions/checkout@v7 Co-Authored-By: Claude Opus 5 (1M context) --- .github/workflows/golangci-lint.yml | 2 +- .github/workflows/release.yml | 6 +++--- .github/workflows/test.yml | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml index e02e6dd..879843a 100644 --- a/.github/workflows/golangci-lint.yml +++ b/.github/workflows/golangci-lint.yml @@ -19,7 +19,7 @@ jobs: with: cache: false go-version: '1.22' - - uses: 'actions/checkout@v6' + - uses: 'actions/checkout@v7' - name: 'golangci-lint' uses: 'golangci/golangci-lint-action@v6' with: diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index e0f7944..0e0522e 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -50,7 +50,7 @@ jobs: go-version: '^1.21' - name: Check out repository into the Go module directory - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -126,7 +126,7 @@ jobs: go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Select correct tag run: git checkout ${{ github.ref_name }} @@ -172,7 +172,7 @@ jobs: go-version: '^1.22' - name: Check out repository into the Go module directory - uses: actions/checkout@v6 + uses: actions/checkout@v7 - name: Select correct tag run: git checkout ${{ github.ref_name }} diff --git a/.github/workflows/test.yml b/.github/workflows/test.yml index b7deec9..6bf2beb 100644 --- a/.github/workflows/test.yml +++ b/.github/workflows/test.yml @@ -12,7 +12,7 @@ jobs: with: cache: false go-version: '1.22' - - uses: actions/checkout@v6 + - uses: actions/checkout@v7 - uses: n8maninger/action-golang-test@v2 with: args: "-race;-timeout=30m"