Merge pull request #91 from sudo-bmitch/pr-update-20241220

Version bump

Author: sudo-bmitch

.github/workflows/docker.yml

@@ -76,7 +76,7 @@ jobs:
       uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # v4.2.2
 
     - name: Set up Docker Buildx
-      uses: docker/setup-buildx-action@c47758b77c9736f4b2ef4073d4d51994fabfe349 # v3.7.1
+      uses: docker/setup-buildx-action@6524bf65af31da8d45b59e8c27de4bd072b392f5 # v3.8.0
 
     - name: Install cosign
       uses: sigstore/cosign-installer@dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da # v3.7.0

.github/workflows/go.yml

@@ -96,7 +96,7 @@ jobs:
 
     - name: Save artifacts
       if: github.ref == 'refs/heads/main' && matrix.gover == env.RELEASE_GO_VER
-      uses: actions/upload-artifact@b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882 # v4.4.3
+      uses: actions/upload-artifact@6f51ac03b9356f520e9adb1b1b7802705f340c2b # v4.5.0
       with:
         name: binaries
         path: ./artifacts/

.version-bump.lock

@@ -6,25 +6,25 @@
 {"name":"gha-golang-release","key":"golang-latest","version":"1.23"}
 {"name":"gha-uses-commit","key":"https://github.com/actions/checkout.git:v4.2.2","version":"11bd71901bbe5b1630ceea73d27597364c9af683"}
 {"name":"gha-uses-commit","key":"https://github.com/actions/setup-go.git:v5.2.0","version":"3041bf56c941b39c61721a86cd11f3bb1338122a"}
-{"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v4.4.3","version":"b4b15b8c7c6ac21ea08fcf65892d2ee8f75cf882"}
+{"name":"gha-uses-commit","key":"https://github.com/actions/upload-artifact.git:v4.5.0","version":"6f51ac03b9356f520e9adb1b1b7802705f340c2b"}
 {"name":"gha-uses-commit","key":"https://github.com/docker/build-push-action.git:v6.10.0","version":"48aba3b46d1b1fec4febb7c5d0c644b249a11355"}
 {"name":"gha-uses-commit","key":"https://github.com/docker/login-action.git:v3.3.0","version":"9780b0c442fbb1117ed29e0efdff1e18412f7567"}
-{"name":"gha-uses-commit","key":"https://github.com/docker/setup-buildx-action.git:v3.7.1","version":"c47758b77c9736f4b2ef4073d4d51994fabfe349"}
+{"name":"gha-uses-commit","key":"https://github.com/docker/setup-buildx-action.git:v3.8.0","version":"6524bf65af31da8d45b59e8c27de4bd072b392f5"}
 {"name":"gha-uses-commit","key":"https://github.com/sigstore/cosign-installer.git:v3.7.0","version":"dc72c7d5c4d10cd6bcb8cf6e3fd625a9e5e537da"}
 {"name":"gha-uses-commit","key":"https://github.com/softprops/action-gh-release.git:v2.2.0","version":"7b4da11513bf3f43f9999e90eabced41ab8bb048"}
 {"name":"gha-uses-semver","key":"https://github.com/actions/checkout.git","version":"v4.2.2"}
 {"name":"gha-uses-semver","key":"https://github.com/actions/setup-go.git","version":"v5.2.0"}
-{"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v4.4.3"}
+{"name":"gha-uses-semver","key":"https://github.com/actions/upload-artifact.git","version":"v4.5.0"}
 {"name":"gha-uses-semver","key":"https://github.com/docker/build-push-action.git","version":"v6.10.0"}
 {"name":"gha-uses-semver","key":"https://github.com/docker/login-action.git","version":"v3.3.0"}
-{"name":"gha-uses-semver","key":"https://github.com/docker/setup-buildx-action.git","version":"v3.7.1"}
+{"name":"gha-uses-semver","key":"https://github.com/docker/setup-buildx-action.git","version":"v3.8.0"}
 {"name":"gha-uses-semver","key":"https://github.com/sigstore/cosign-installer.git","version":"v3.7.0"}
 {"name":"gha-uses-semver","key":"https://github.com/softprops/action-gh-release.git","version":"v2.2.0"}
 {"name":"go-mod-golang-release","key":"golang-oldest","version":"1.21"}
 {"name":"makefile-go-vulncheck","key":"https://go.googlesource.com/vuln.git","version":"v1.1.3"}
 {"name":"makefile-gomajor","key":"https://github.com/icholy/gomajor.git","version":"v0.14.0"}
 {"name":"makefile-gosec","key":"https://github.com/securego/gosec.git","version":"v2.21.4"}
 {"name":"makefile-markdown-lint","key":"docker.io/davidanson/markdownlint-cli2","version":"v0.16.0"}
-{"name":"makefile-osv-scanner","key":"https://github.com/google/osv-scanner.git","version":"v1.9.1"}
+{"name":"makefile-osv-scanner","key":"https://github.com/google/osv-scanner.git","version":"v1.9.2"}
 {"name":"makefile-staticcheck","key":"https://github.com/dominikh/go-tools.git","version":"v0.5.1"}
 {"name":"osv-golang-release","key":"docker.io/library/golang","version":"1.23.4"}

Makefile

@@ -21,7 +21,7 @@ MARKDOWN_LINT_VER?=v0.16.0
 GOMAJOR_VER?=v0.14.0
 GOSEC_VER?=v2.21.4
 GO_VULNCHECK_VER?=v1.1.3
-OSV_SCANNER_VER?=v1.9.1
+OSV_SCANNER_VER?=v1.9.2
 STATICCHECK_VER?=v0.5.1
 
 .PHONY: .FORCE

go.mod

@@ -34,7 +34,7 @@ require (
 	github.com/ulikunitz/xz v0.5.12 // indirect
 	github.com/xanzy/ssh-agent v0.3.3 // indirect
 	golang.org/x/crypto v0.31.0 // indirect
-	golang.org/x/net v0.29.0 // indirect
+	golang.org/x/net v0.33.0 // indirect
 	golang.org/x/sys v0.28.0 // indirect
 	gopkg.in/warnings.v0 v0.1.2 // indirect
 )

go.sum

@@ -115,6 +115,8 @@ golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs=
 golang.org/x/net v0.8.0/go.mod h1:QVkue5JL9kW//ek3r6jTKnTFis1tRmNAW2P1shuFdJc=
 golang.org/x/net v0.29.0 h1:5ORfpBpCs4HzDYoodCDBbwHzdR5UrLBZ3sOnUJmFoHo=
 golang.org/x/net v0.29.0/go.mod h1:gLkgy8jTGERgjzMic6DS9+SP0ajcu6Xu3Orq/SpETg0=
+golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I=
+golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4=
 golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
 golang.org/x/sync v0.1.0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=