build(deps): bump github.com/rhysd/actionlint from 1.6.12 to 1.6.13

[dependabot]

Bumps github.com/rhysd/actionlint from 1.6.12 to 1.6.13.

Release notes

Sourced from github.com/rhysd/actionlint's releases.

v1.6.13

• secrets: inherit in reusable workflow is now supported (#138)

  on:
    workflow_dispatch:
  jobs:
  pass-secrets-to-workflow:
  uses: ./.github/workflows/called-workflow.yml
  secrets: inherit

  This means that actionlint cannot know the workflow inherits secrets or not when checking a reusable workflow. To support secrets: inherit without giving up on checking secrets context, actionlint assumes the followings. See the document for the details.
  • when secrets: is omitted in a reusable workflow, the workflow inherits secrets from a caller
  • when secrets: exists in a reusable workflow, the workflow inherits no other secret
• macos-12 runner is now supported (#134, thanks @​shogo82148)
• ubuntu-22.04 runner is now supported (#142, thanks @​shogo82148)
• concurrency is available on reusable workflow call (#136)

  jobs:
    checks:
      concurrency:
        group: ${{ github.ref }}-${{ github.workflow }}
        cancel-in-progress: true
      uses: ./path/to/workflow.yaml

• pre-commit hook now uses a fixed version of actionlint. For example, the following configuration continues to use actionlint v1.6.13 even if v1.6.14 is released. (#116)

  repos:
    - repo: https://github.com/rhysd/actionlint
      rev: v1.6.13
      hooks:
        - id: actionlint-docker

• Update popular actions data set including new versions of docker/*, haskell/actions/setup, actions/setup-go, ... (#140, thanks @​bflad)
• Update Go module dependencies

Changelog

Sourced from github.com/rhysd/actionlint's changelog.

v1.6.13 - 18 May 2022

• secrets: inherit in reusable workflow is now supported (#138)

  on:
    workflow_dispatch:
  jobs:
  pass-secrets-to-workflow:
  uses: ./.github/workflows/called-workflow.yml
  secrets: inherit

  This means that actionlint cannot know the workflow inherits secrets or not when checking a reusable workflow. To support secrets: inherit without giving up on checking secrets context, actionlint assumes the followings. See the document for the details.
  • when secrets: is omitted in a reusable workflow, the workflow inherits secrets from a caller
  • when secrets: exists in a reusable workflow, the workflow inherits no other secret
• macos-12 runner is now supported (#134, thanks @​shogo82148)
• ubuntu-22.04 runner is now supported (#142, thanks @​shogo82148)
• concurrency is available on reusable workflow call (#136)

  jobs:
    checks:
      concurrency:
        group: ${{ github.ref }}-${{ github.workflow }}
        cancel-in-progress: true
      uses: ./path/to/workflow.yaml

• pre-commit hook now uses a fixed version of actionlint. For example, the following configuration continues to use actionlint v1.6.13 even if v1.6.14 is released. (#116)

  repos:
    - repo: https://github.com/rhysd/actionlint
      rev: v1.6.13
      hooks:
        - id: actionlint-docker

• Update popular actions data set including new versions of docker/*, haskell/actions/setup, actions/setup-go, ... (#140, thanks @​bflad)
• Update Go module dependencies

[Changes][v1.6.13]

Commits

• e4caae9 bump up version to v1.6.13
• 2334ba7 Merge branch 'issue-136'
• 8bca30b describe behavior of secrets: considering secrets inheritance
• f26448b assume reusable workflow inherits secrets only when secrets: is omitted
• f3909bd Merge pull request #142 from shogo82148/ubuntu-22.04-is-now-public-beta
• 09a60b0 ubuntu-22.04 is now public beta
• 8a69b50 push version bump commit to main in bump-version.bash
• cd139ad Merge branch 'fix-secrets-inherit' (#138)
• 018dc75 assume reusable workflow inherits secrets when secrets is not declared
• 4857e80 fix parsing secrets: inherit in use of workflow call
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[codecov]

Codecov Report

Merging #1173 (11567b3) into master (4f8da0a) will increase coverage by 2.49%.
The diff coverage is 78.48%.

@@            Coverage Diff             @@
##           master    #1173      +/-   ##
==========================================
+ Coverage   57.50%   60.00%   +2.49%     
==========================================
  Files          32       39       +7     
  Lines        4594     5000     +406     
==========================================
+ Hits         2642     3000     +358     
- Misses       1729     1751      +22     
- Partials      223      249      +26     

Impacted Files	Coverage Δ
pkg/model/action.go	0.00% <ø> (ø)
pkg/model/github_context.go	79.51% <ø> (ø)
pkg/model/planner.go	50.73% <ø> (+0.32%)	⬆️
pkg/model/workflow.go	50.36% <0.00%> (-0.56%)	⬇️
pkg/container/docker_run.go	5.01% <1.96%> (-0.53%)	⬇️
pkg/common/git.go	49.31% <28.57%> (-0.52%)	⬇️
pkg/container/file_collector.go	44.85% <44.85%> (ø)
pkg/runner/runner.go	73.72% <73.68%> (-2.75%)	⬇️
pkg/exprparser/interpreter.go	75.29% <75.00%> (+1.89%)	⬆️
pkg/runner/logger.go	69.56% <75.47%> (+4.13%)	⬆️
... and 20 more

📣 Codecov can now indicate which changes are the most critical in Pull Requests. Learn more