Skip to content

Dependabot updates#565

Merged
nickeskov merged 12 commits into
mainfrom
dependabot-updates
May 29, 2026
Merged

Dependabot updates#565
nickeskov merged 12 commits into
mainfrom
dependabot-updates

Conversation

@nickeskov
Copy link
Copy Markdown
Collaborator

This pull request updates several GitHub Actions and Go module dependencies to their latest patch or minor versions, improving security, stability, and compatibility across the CI/CD pipeline.

CI/CD Workflow Updates:

  • Updated all github/codeql-action steps in .github/workflows/codeql-analysis.yml and .github/workflows/security.yml to use a newer commit hash, ensuring the latest features and security patches are applied. [1] [2] [3] [4] [5]
  • Updated golangci-lint-action in .github/workflows/go.yml to a newer commit for improved linting and reliability. [1] [2]
  • Upgraded Docker-related GitHub Actions in .github/workflows/publish-to-ghcr.yml to newer versions for login, metadata, and build/push steps. [1] [2] [3]

Go Dependency Updates:

  • Bumped github.com/nats-io/nats-server/v2 from v2.14.0 to v2.14.1 and github.com/klauspost/compress from v1.18.5 to v1.18.6 in go.mod for minor improvements and bug fixes. [1] [2]
  • Upgraded several indirect golang.org/x dependencies (crypto, net, sys, text) to their latest patch versions for enhanced security and compatibility.

dependabot Bot and others added 7 commits May 20, 2026 17:19
Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.14.0 to 2.14.1.
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md)
- [Commits](nats-io/nats-server@v2.14.0...v2.14.1)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 9.2.0 to 9.2.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@1e7e51e...82606bf)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: 9.2.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.3 to 4.36.0.
- [Release notes](https://github.com/github/codeql-action/releases)
- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)
- [Commits](github/codeql-action@e46ed2c...7211b7c)

---
updated-dependencies:
- dependency-name: github/codeql-action
  dependency-version: 4.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 7.1.0 to 7.2.0.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@bcafcac...f9f3042)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 7.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 6.0.0 to 6.1.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@030e881...80c7e94)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [docker/login-action](https://github.com/docker/login-action) from 4.1.0 to 4.2.0.
- [Release notes](https://github.com/docker/login-action/releases)
- [Commits](docker/login-action@4907a6d...650006c)

---
updated-dependencies:
- dependency-name: docker/login-action
  dependency-version: 4.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…er/build-push-action-7.2.0', 'origin/dependabot/github_actions/docker/login-action-4.2.0', 'origin/dependabot/github_actions/docker/metadata-action-6.1.0', 'origin/dependabot/github_actions/github/codeql-action-4.36.0', 'origin/dependabot/github_actions/golangci/golangci-lint-action-9.2.1' and 'origin/dependabot/go_modules/github.com/nats-io/nats-server/v2-2.14.1' into dependabot-updates
@nickeskov nickeskov requested a review from alexeykiselev May 28, 2026 23:36
@nickeskov nickeskov added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code go Pull requests that update Go code labels May 28, 2026
dependabot Bot and others added 2 commits May 29, 2026 12:06
Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.0.0 to 4.1.0.
- [Release notes](https://github.com/docker/setup-buildx-action/releases)
- [Commits](docker/setup-buildx-action@4d04d5d...d7f5e7f)

---
updated-dependencies:
- dependency-name: docker/setup-buildx-action
  dependency-version: 4.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…/setup-buildx-action-4.1.0' into dependabot-updates
@nickeskov nickeskov force-pushed the dependabot-updates branch from 65b3612 to 671bbe3 Compare May 29, 2026 13:28
@nickeskov nickeskov merged commit 9ced08b into main May 29, 2026
14 checks passed
@nickeskov nickeskov deleted the dependabot-updates branch May 29, 2026 13:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants