Merge pull request #1328 from flux-iac/dependabot/github_actions/gh-m…

…ajor-d034ffb542

Bump the gh-major group across 1 directory with 8 updates

.github/workflows/build-and-publish.yaml

@@ -22,7 +22,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.0.0
  - name: Setup Go
- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: go.mod
  - name: Setup Terraform
@@ -40,7 +40,7 @@ jobs:
  uses: fluxcd/pkg/actions/kustomize@1bfad582060d2d6e464756fbd5d7a2b2fa4f75b9 # main
  - name: Get branch names
  id: branch-name
- uses: tj-actions/branch-names@033f2358d95522973eee35810e35a86fae4a71d8 # v7.0.5
+ uses: tj-actions/branch-names@6871f53176ad61624f978536bbf089c574dc19a2 # v8.0.1
  - name: Prepare
  id: prep
  run: |

.github/workflows/docs.yaml

@@ -18,7 +18,7 @@ jobs:
  contents: write
  steps:
  - uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.0.0
- - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0
+ - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
  with:
  python-version: 3.x
  - name: Install mkdocs

.github/workflows/e2e.yaml

@@ -27,14 +27,14 @@ jobs:
  with:
  version: 4.14.2
  - name: Setup Go
- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: go.mod
  cache-dependency-path: |
  **/go.sum
  **/go.mod
  - name: Cache Docker layers
- uses: actions/cache@704facf57e6136b1bc63b828d79edcd491f0ee84 # v3.3.2
+ uses: actions/cache@0c45773b623bea8c8e75f6c82b208c3cf94ea4f9 # v4.0.2
  id: cache
  with:
  path: /tmp/.buildx-cache

.github/workflows/helm-test.yaml

@@ -19,11 +19,11 @@ jobs:
  fetch-depth: 0
 
  - name: Set up Helm
- uses: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78 # v3.5.0
+ uses: azure/setup-helm@fe7b79cd5ee1e45176fcad797de68ecaf3ca4814 # v3.5.0
  with:
  version: latest
 
- - uses: actions/setup-python@61a6322f88396a6271a6ee3565807d608ecaddd1 # v4.7.0
+ - uses: actions/setup-python@82c7e631bb3cdc910f68e0081d67478d79c6982d # v5.1.0
  with:
  python-version: "3.10"
 

.github/workflows/ossf.yaml

@@ -34,7 +34,7 @@ jobs:
  # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
  # format to the repository Actions tab.
  - name: "Upload artifact"
- uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+ uses: actions/upload-artifact@65462800fd760344b1a7b4382951275a0abb4808 # v4.3.3
  with:
  name: SARIF file
  path: results.sarif

.github/workflows/release.yaml

@@ -196,12 +196,12 @@ jobs:
  kustomize build ./config/package > ./config/release/${{ env.CONTROLLER }}.packages.yaml
  echo '[CHANGELOG](https://github.com/flux-iac/${{ env.CONTROLLER }}/blob/main/CHANGELOG.md)' > ./config/release/notes.md
  - name: Setup Go
- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: go.mod
  - name: Create release
  if: startsWith(github.ref, 'refs/tags/v')
- uses: goreleaser/goreleaser-action@7ec5c2b0c6cdda6e8bbb49444bc797dd33d74dd8 # v5.0.0
+ uses: goreleaser/goreleaser-action@286f3b13b1b49da4ac219696163fb8c1c93e1200 # v6.0.0
  with:
  version: latest
  args: release --release-notes=./config/release/notes.md --skip-validate

.github/workflows/scan.yaml

@@ -17,7 +17,7 @@ jobs:
  steps:
  - uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.0.0
  - name: Run FOSSA scan and upload build data
- uses: fossa-contrib/fossa-action@6728dc6fe9a068c648d080c33829ffbe56565023 # v2.0.0
+ uses: fossa-contrib/fossa-action@cdc5065bcdee31a32e47d4585df72d66e8e941c2 # v3.0.0
  with:
  # FOSSA Push-Only API Token
  fossa-api-key: b429fea44d610229ac091ed8d1223bb9
@@ -32,7 +32,7 @@ jobs:
  - name: Checkout repository
  uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.0.0
  - name: Setup Go
- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: go.mod
  cache-dependency-path: |

.github/workflows/targeted-test.yaml

@@ -15,7 +15,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.0.0
  - name: Setup Go
- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: go.mod
  cache-dependency-path: |

.github/workflows/test.yaml

@@ -60,7 +60,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.0.0
  - name: Setup Go
- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: go.mod
  cache-dependency-path: |
@@ -87,7 +87,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.0.0
  - name: Setup Go
- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: go.mod
  cache-dependency-path: |

.github/workflows/verify.yaml

@@ -21,7 +21,7 @@ jobs:
  - name: Checkout
  uses: actions/checkout@b80ff79f1755d06ba70441c368a6fe801f5f3a62 # v4.0.0
  - name: Setup Go
- uses: actions/setup-go@93397bea11091df50f3d7e59dc26a7711a8bcfbe # v4.1.0
+ uses: actions/setup-go@cdcb36043654635271a94b9a6d1392de5bb323a7 # v5.0.1
  with:
  go-version-file: go.mod
  cache-dependency-path: |