fix: bumped gh-actions to v1.4.3

fredbi · fredbi · commit 414142e054e9 · 2026-01-02T14:46:19.000+01:00
Signed-off-by: Frederic BIDON &lt;fredbi@yahoo.com&gt;
diff --git a/.github/workflows/auto-merge.yml b/.github/workflows/auto-merge.yml
@@ -81,7 +81,7 @@ jobs:
         run: gh pr review --approve "$PR_URL"
       -
         name: Wait for all workflow runs to complete
-        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
         with:
           pr-url: ${{ env.PR_URL }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/bump-release-monorepo.yml b/.github/workflows/bump-release-monorepo.yml
@@ -122,7 +122,7 @@ jobs:
       -
         name: Detect go mono-repo
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
 
   bump-release-single:
     name: Bump release (single module)
@@ -158,7 +158,7 @@ jobs:
       -
         name: Determine next tag
         id: bump-release
-        uses: go-openapi/gh-actions/ci-jobs/next-tag@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/next-tag@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
         with:
           bump-patch: ${{ inputs.bump-patch }}
           bump-minor: ${{ inputs.bump-minor }}
@@ -247,7 +247,7 @@ jobs:
       -
         name: Configure bot credentials
         if: ${{ inputs.enable-tag-signing == 'true' }}
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
         # This is using the GPG signature of bot-go-openapi.
         #
         # For go-openapi repos (using secrets: inherit):
diff --git a/.github/workflows/bump-release.yml b/.github/workflows/bump-release.yml
@@ -102,15 +102,15 @@ jobs:
       -
         name: Determine next tag
         id: bump-release
-        uses: go-openapi/gh-actions/ci-jobs/next-tag@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/next-tag@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
         with:
           bump-patch: ${{ inputs.bump-patch }}
           bump-minor: ${{ inputs.bump-minor }}
           bump-major: ${{ inputs.bump-major }}
       -
         name: Configure bot credentials
         if: ${{ inputs.enable-tag-signing == 'true' }}
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
         # This is using the GPG signature of bot-go-openapi.
         #
         # For go-openapi repos (using secrets: inherit):
diff --git a/.github/workflows/collect-reports.yml b/.github/workflows/collect-reports.yml
@@ -32,7 +32,7 @@ jobs:
           path: reports/
       -
         name: Install go-junit-report
-        uses: go-openapi/gh-actions/install/go-junit-report@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/install/go-junit-report@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
       -
         name: Convert test reports to a merged JUnit XML
         # NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics.
@@ -57,7 +57,7 @@ jobs:
           verbose: true
       -
         name: Install go-ctrf-json-reporter
-        uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
       -
         name: Convert test reports to CTRF JSON
         # description: |
diff --git a/.github/workflows/contributors.yml b/.github/workflows/contributors.yml
@@ -83,7 +83,7 @@ jobs:
           mv contributors.md CONTRIBUTORS.md
       -
         name: Configure bot credentials
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
         id: bot-credentials
         # For go-openapi repos (using secrets: inherit):
         #   Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc.
@@ -141,7 +141,7 @@ jobs:
         run: gh pr review --approve "$PR_URL"
       -
         name: Wait for all workflow runs to complete
-        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
         with:
           pr-url: ${{ env.PR_URL }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/go-test-monorepo.yml b/.github/workflows/go-test-monorepo.yml
@@ -35,7 +35,7 @@ jobs:
       -
         name: Detect go mono-repo
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
       -
         name: golangci-lint [monorepo]
         # golangci-action v9.1+ has an experimental built-in mono repo detection setup.
@@ -91,10 +91,10 @@ jobs:
       -
         name: Detect go version capabilities
         id: detect-go-version
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-version@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-version@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
       -
         name: Install gotestsum
-        uses: go-openapi/gh-actions/install/gotestsum@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/install/gotestsum@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
       -
         name: Run unit tests on all modules (go1.25+ with go.work) [monorepo]
         if: ${{ needs.lint.outputs.is-monorepo == 'true' && steps.detect-go-version.outputs.is-gotestwork-supported == 'true' }}
diff --git a/.github/workflows/go-test.yml b/.github/workflows/go-test.yml
@@ -53,7 +53,7 @@ jobs:
           cache: true
       -
         name: Install gotestsum
-        uses: go-openapi/gh-actions/install/gotestsum@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/install/gotestsum@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
       -
         name: Run unit tests
         run: >
diff --git a/.github/workflows/prepare-release-monorepo.yml b/.github/workflows/prepare-release-monorepo.yml
@@ -107,7 +107,7 @@ jobs:
       -
         name: Detect go mono-repo
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
       -
         name: Update go.mod files for new release
         env:
@@ -160,7 +160,7 @@ jobs:
           git status --short
       -
         name: Configure bot credentials
-        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/bot-credentials@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
         id: bot-credentials
         # For go-openapi repos (using secrets: inherit):
         #   Falls back to: CI_BOT_APP_ID, CI_BOT_APP_PRIVATE_KEY, CI_BOT_GPG_PRIVATE_KEY, etc.
@@ -230,7 +230,7 @@ jobs:
         run: gh pr review --approve "$PR_URL"
       -
         name: Wait for all workflow runs to complete
-        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
         with:
           pr-url: ${{ env.PR_URL }}
           github-token: ${{ secrets.GITHUB_TOKEN }}
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
@@ -84,7 +84,7 @@ jobs:
         name: Detect go mono-repo
         if: ${{ inputs.is-monorepo == 'true' }}
         id: detect-monorepo
-        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2
+        uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3
       -
         name: Install git-cliff [monorepo]
         if: ${{ inputs.is-monorepo == 'true' }}

Original file line number	Diff line number	Diff line change
`@@ -81,7 +81,7 @@ jobs:`
`81`	`81`	`run: gh pr review --approve "$PR_URL"`
`82`	`82`	`-`
`83`	`83`	`name: Wait for all workflow runs to complete`
`84`		`- uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`84`	`+ uses: go-openapi/gh-actions/ci-jobs/wait-pending-jobs@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`85`	`85`	`with:`
`86`	`86`	`pr-url: ${{ env.PR_URL }}`
`87`	`87`	`github-token: ${{ secrets.GITHUB_TOKEN }}`
Original file line number	Diff line number	Diff line change
`@@ -122,7 +122,7 @@ jobs:`
`122`	`122`	`-`
`123`	`123`	`name: Detect go mono-repo`
`124`	`124`	`id: detect-monorepo`
`125`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`125`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`126`	`126`
`127`	`127`	`bump-release-single:`
`128`	`128`	`name: Bump release (single module)`
`@@ -158,7 +158,7 @@ jobs:`
`158`	`158`	`-`
`159`	`159`	`name: Determine next tag`
`160`	`160`	`id: bump-release`
`161`		`- uses: go-openapi/gh-actions/ci-jobs/next-tag@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`161`	`+ uses: go-openapi/gh-actions/ci-jobs/next-tag@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`162`	`162`	`with:`
`163`	`163`	`bump-patch: ${{ inputs.bump-patch }}`
`164`	`164`	`bump-minor: ${{ inputs.bump-minor }}`
`@@ -247,7 +247,7 @@ jobs:`
`247`	`247`	`-`
`248`	`248`	`name: Configure bot credentials`
`249`	`249`	`if: ${{ inputs.enable-tag-signing == 'true' }}`
`250`		`- uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`250`	`+ uses: go-openapi/gh-actions/ci-jobs/bot-credentials@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`251`	`251`	`# This is using the GPG signature of bot-go-openapi.`
`252`	`252`	`#`
`253`	`253`	`# For go-openapi repos (using secrets: inherit):`
Original file line number	Diff line number	Diff line change
`@@ -102,15 +102,15 @@ jobs:`
`102`	`102`	`-`
`103`	`103`	`name: Determine next tag`
`104`	`104`	`id: bump-release`
`105`		`- uses: go-openapi/gh-actions/ci-jobs/next-tag@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`105`	`+ uses: go-openapi/gh-actions/ci-jobs/next-tag@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`106`	`106`	`with:`
`107`	`107`	`bump-patch: ${{ inputs.bump-patch }}`
`108`	`108`	`bump-minor: ${{ inputs.bump-minor }}`
`109`	`109`	`bump-major: ${{ inputs.bump-major }}`
`110`	`110`	`-`
`111`	`111`	`name: Configure bot credentials`
`112`	`112`	`if: ${{ inputs.enable-tag-signing == 'true' }}`
`113`		`- uses: go-openapi/gh-actions/ci-jobs/bot-credentials@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`113`	`+ uses: go-openapi/gh-actions/ci-jobs/bot-credentials@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`114`	`114`	`# This is using the GPG signature of bot-go-openapi.`
`115`	`115`	`#`
`116`	`116`	`# For go-openapi repos (using secrets: inherit):`
Original file line number	Diff line number	Diff line change
`@@ -32,7 +32,7 @@ jobs:`
`32`	`32`	`path: reports/`
`33`	`33`	`-`
`34`	`34`	`name: Install go-junit-report`
`35`		`- uses: go-openapi/gh-actions/install/go-junit-report@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`35`	`+ uses: go-openapi/gh-actions/install/go-junit-report@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`36`	`36`	`-`
`37`	`37`	`name: Convert test reports to a merged JUnit XML`
`38`	`38`	`# NOTE: codecov test reports only support JUnit format at this moment. See https://docs.codecov.com/docs/test-analytics.`
`@@ -57,7 +57,7 @@ jobs:`
`57`	`57`	`verbose: true`
`58`	`58`	`-`
`59`	`59`	`name: Install go-ctrf-json-reporter`
`60`		`- uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`60`	`+ uses: go-openapi/gh-actions/install/go-ctrf-json-reporter@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`61`	`61`	`-`
`62`	`62`	`name: Convert test reports to CTRF JSON`
`63`	`63`	`# description: \|`
Original file line number	Diff line number	Diff line change
`@@ -35,7 +35,7 @@ jobs:`
`35`	`35`	`-`
`36`	`36`	`name: Detect go mono-repo`
`37`	`37`	`id: detect-monorepo`
`38`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`38`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`39`	`39`	`-`
`40`	`40`	`name: golangci-lint [monorepo]`
`41`	`41`	`# golangci-action v9.1+ has an experimental built-in mono repo detection setup.`
`@@ -91,10 +91,10 @@ jobs:`
`91`	`91`	`-`
`92`	`92`	`name: Detect go version capabilities`
`93`	`93`	`id: detect-go-version`
`94`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-version@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`94`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-version@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`95`	`95`	`-`
`96`	`96`	`name: Install gotestsum`
`97`		`- uses: go-openapi/gh-actions/install/gotestsum@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`97`	`+ uses: go-openapi/gh-actions/install/gotestsum@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`98`	`98`	`-`
`99`	`99`	`name: Run unit tests on all modules (go1.25+ with go.work) [monorepo]`
`100`	`100`	`if: ${{ needs.lint.outputs.is-monorepo == 'true' && steps.detect-go-version.outputs.is-gotestwork-supported == 'true' }}`
Original file line number	Diff line number	Diff line change
`@@ -53,7 +53,7 @@ jobs:`
`53`	`53`	`cache: true`
`54`	`54`	`-`
`55`	`55`	`name: Install gotestsum`
`56`		`- uses: go-openapi/gh-actions/install/gotestsum@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`56`	`+ uses: go-openapi/gh-actions/install/gotestsum@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`57`	`57`	`-`
`58`	`58`	`name: Run unit tests`
`59`	`59`	`run: >`
Original file line number	Diff line number	Diff line change
`@@ -84,7 +84,7 @@ jobs:`
`84`	`84`	`name: Detect go mono-repo`
`85`	`85`	`if: ${{ inputs.is-monorepo == 'true' }}`
`86`	`86`	`id: detect-monorepo`
`87`		`- uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@c4b289d8cf5483e32e6970bcf8878b6be5a779e2 # v1.4.2`
	`87`	`+ uses: go-openapi/gh-actions/ci-jobs/detect-go-monorepo@9c04f383fd8d769f5f49842f6e1ae9092ea25071 # v1.4.3`
`88`	`88`	`-`
`89`	`89`	`name: Install git-cliff [monorepo]`
`90`	`90`	`if: ${{ inputs.is-monorepo == 'true' }}`